Warning: Permanently added '10.128.0.190' (ECDSA) to the list of known hosts.
2021/01/09 23:12:00 fuzzer started
2021/01/09 23:12:00 dialing manager at 10.128.0.105:37973
2021/01/09 23:12:00 syscalls: 3480
2021/01/09 23:12:00 code coverage: enabled
2021/01/09 23:12:00 comparison tracing: enabled
2021/01/09 23:12:00 extra coverage: enabled
2021/01/09 23:12:00 setuid sandbox: enabled
2021/01/09 23:12:00 namespace sandbox: enabled
2021/01/09 23:12:00 Android sandbox: /sys/fs/selinux/policy does not exist
2021/01/09 23:12:00 fault injection: enabled
2021/01/09 23:12:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/01/09 23:12:00 net packet injection: enabled
2021/01/09 23:12:00 net device setup: enabled
2021/01/09 23:12:00 concurrency sanitizer: enabled
2021/01/09 23:12:00 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/01/09 23:12:00 USB emulation: enabled
2021/01/09 23:12:00 hci packet injection: enabled
2021/01/09 23:12:00 wifi device emulation: enabled
2021/01/09 23:12:02 suppressing KCSAN reports in functions: '__bpf_lru_list_rotate' '__ext4_new_inode' 'wg_packet_decrypt_worker' 'ext4_free_inode' 'blk_mq_rq_ctx_init' '__percpu_counter_compare' 'ext4_writepages' '__xa_clear_mark' 'kauditd_thread' 'complete_signal' 'exit_mm' 'pcpu_alloc' 'blk_mq_dispatch_rq_list' 'blk_mq_sched_dispatch_requests' 'isolate_migratepages_block' 
2021/01/09 23:12:02 fetching corpus: 0, signal 0/2000 (executing program)
2021/01/09 23:12:02 fetching corpus: 47, signal 23420/26854 (executing program)
2021/01/09 23:12:02 fetching corpus: 97, signal 40273/44846 (executing program)
2021/01/09 23:12:02 fetching corpus: 147, signal 50643/56311 (executing program)
2021/01/09 23:12:02 fetching corpus: 196, signal 60075/66593 (executing program)
2021/01/09 23:12:02 fetching corpus: 246, signal 73083/79948 (executing program)
2021/01/09 23:12:02 fetching corpus: 295, signal 81541/88896 (executing program)
2021/01/09 23:12:02 fetching corpus: 344, signal 87378/95229 (executing program)
2021/01/09 23:12:02 fetching corpus: 394, signal 92487/100809 (executing program)
2021/01/09 23:12:03 fetching corpus: 444, signal 96606/105412 (executing program)
2021/01/09 23:12:03 fetching corpus: 493, signal 99380/108690 (executing program)
2021/01/09 23:12:03 fetching corpus: 543, signal 104701/114249 (executing program)
2021/01/09 23:12:03 fetching corpus: 593, signal 109487/119113 (executing program)
2021/01/09 23:12:03 fetching corpus: 643, signal 115205/124659 (executing program)
2021/01/09 23:12:03 fetching corpus: 693, signal 119767/129115 (executing program)
2021/01/09 23:12:03 fetching corpus: 741, signal 123589/132899 (executing program)
2021/01/09 23:12:03 fetching corpus: 791, signal 127276/136446 (executing program)
2021/01/09 23:12:03 fetching corpus: 841, signal 130228/139330 (executing program)
2021/01/09 23:12:03 fetching corpus: 890, signal 133057/142058 (executing program)
2021/01/09 23:12:04 fetching corpus: 940, signal 135491/144388 (executing program)
2021/01/09 23:12:04 fetching corpus: 990, signal 138080/146839 (executing program)
2021/01/09 23:12:04 fetching corpus: 1040, signal 141484/149788 (executing program)
2021/01/09 23:12:04 fetching corpus: 1090, signal 145818/153324 (executing program)
2021/01/09 23:12:04 fetching corpus: 1140, signal 148514/155545 (executing program)
2021/01/09 23:12:04 fetching corpus: 1190, signal 151665/158065 (executing program)
2021/01/09 23:12:04 fetching corpus: 1240, signal 153772/159791 (executing program)
2021/01/09 23:12:04 fetching corpus: 1290, signal 156574/161942 (executing program)
2021/01/09 23:12:04 fetching corpus: 1340, signal 158844/163699 (executing program)
2021/01/09 23:12:05 fetching corpus: 1388, signal 161059/165329 (executing program)
2021/01/09 23:12:05 fetching corpus: 1438, signal 164327/167590 (executing program)
2021/01/09 23:12:05 fetching corpus: 1487, signal 166168/168911 (executing program)
2021/01/09 23:12:05 fetching corpus: 1537, signal 169517/171120 (executing program)
2021/01/09 23:12:05 fetching corpus: 1586, signal 171677/172509 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171683/172553 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171802/172693 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171802/172720 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171802/172738 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171802/172767 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171802/172790 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171802/172823 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172859 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172882 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172906 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172922 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172948 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172975 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/172991 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173017 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173044 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173066 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173093 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173120 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173157 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173183 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173210 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173234 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173258 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173295 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173320 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173348 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173375 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173397 (executing program)
2021/01/09 23:12:05 fetching corpus: 1587, signal 171806/173417 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173492 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173516 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173546 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173566 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173591 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173612 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173632 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171939/173672 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173706 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173730 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173762 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173790 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173824 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173841 (executing program)
2021/01/09 23:12:05 fetching corpus: 1588, signal 171942/173868 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171950/173887 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171950/173911 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171950/173938 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171950/173965 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171967/173994 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171967/174013 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171967/174036 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171967/174052 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171967/174072 (executing program)
2021/01/09 23:12:05 fetching corpus: 1589, signal 171967/174072 (executing program)
2021/01/09 23:12:07 starting 6 fuzzer processes
23:12:08 executing program 0:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x8000005})

23:12:08 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4)

23:12:08 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x18, 0x0, 0x1, {0x4, 0x1, 'snmp\x00'}}]}, 0x74}}, 0x0)

23:12:08 executing program 3:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

23:12:08 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1806000000000000000000000000ea5bbc2a00000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8b, &(0x7f00000000c0)=""/139, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

23:12:08 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000540)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100fc24ffff000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00030005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc)

[   39.823350][ T8445] IPVS: ftp: loaded support on port[0] = 21
[   39.898335][ T8445] chnl_net:caif_netlink_parms(): no params data found
[   39.927408][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.934509][ T8445] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.942164][ T8445] device bridge_slave_0 entered promiscuous mode
[   39.961548][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.971106][ T8445] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.979926][ T8445] device bridge_slave_1 entered promiscuous mode
[   40.004041][ T8445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.005645][ T8447] IPVS: ftp: loaded support on port[0] = 21
[   40.014765][ T8445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.035621][ T8445] team0: Port device team_slave_0 added
[   40.042631][ T8445] team0: Port device team_slave_1 added
[   40.059147][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.066196][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.092280][ T8445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.104771][ T8445] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.111913][ T8445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.146210][ T8445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.183200][ T8449] IPVS: ftp: loaded support on port[0] = 21
[   40.201712][ T8445] device hsr_slave_0 entered promiscuous mode
[   40.208168][ T8445] device hsr_slave_1 entered promiscuous mode
[   40.246863][ T8447] chnl_net:caif_netlink_parms(): no params data found
[   40.337167][ T8451] IPVS: ftp: loaded support on port[0] = 21
[   40.345417][ T8445] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   40.362616][ T8445] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   40.373140][ T8445] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   40.392577][ T8445] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   40.401308][ T8447] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.408415][ T8447] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.416183][ T8447] device bridge_slave_0 entered promiscuous mode
[   40.443658][ T8445] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.450747][ T8445] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.458083][ T8445] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.465137][ T8445] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.492644][ T8449] chnl_net:caif_netlink_parms(): no params data found
[   40.522297][ T8447] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.544764][ T8447] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.552343][ T8447] device bridge_slave_1 entered promiscuous mode
[   40.572760][ T8447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.588654][ T8453] IPVS: ftp: loaded support on port[0] = 21
[   40.603591][ T8447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.622113][ T8455] IPVS: ftp: loaded support on port[0] = 21
[   40.682330][ T8447] team0: Port device team_slave_0 added
[   40.702028][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.722169][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.730659][ T8449] device bridge_slave_0 entered promiscuous mode
[   40.742187][ T8445] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.756905][ T8447] team0: Port device team_slave_1 added
[   40.773063][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_0
[   40.780471][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.806705][ T8447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   40.817621][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.824887][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.832384][ T8449] device bridge_slave_1 entered promiscuous mode
[   40.850436][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   40.867646][ T8447] batman_adv: batadv0: Adding interface: batadv_slave_1
[   40.874840][ T8447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   40.901209][ T8447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   40.918139][ T8451] chnl_net:caif_netlink_parms(): no params data found
[   40.928054][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   40.946066][ T8445] 8021q: adding VLAN 0 to HW filter on device team0
[   40.957775][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.967169][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.975222][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.983587][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   41.011983][ T8447] device hsr_slave_0 entered promiscuous mode
[   41.018430][ T8447] device hsr_slave_1 entered promiscuous mode
[   41.024857][ T8447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   41.032523][ T8447] Cannot create hsr debugfs directory
[   41.075596][ T8451] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.082673][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.090470][ T8451] device bridge_slave_0 entered promiscuous mode
[   41.100824][ T8451] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.108270][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.116016][ T8451] device bridge_slave_1 entered promiscuous mode
[   41.123507][ T8455] chnl_net:caif_netlink_parms(): no params data found
[   41.136079][ T8449] team0: Port device team_slave_0 added
[   41.150032][ T8453] chnl_net:caif_netlink_parms(): no params data found
[   41.158843][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   41.168779][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   41.177163][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.184182][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   41.202250][ T8449] team0: Port device team_slave_1 added
[   41.218738][ T8451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.228901][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   41.239245][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   41.247740][ T8088] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.254775][ T8088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   41.273243][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.280241][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.306249][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.318960][ T8451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.329722][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.336729][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.362891][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.377154][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   41.396494][ T8449] device hsr_slave_0 entered promiscuous mode
[   41.404134][ T8449] device hsr_slave_1 entered promiscuous mode
[   41.410814][ T8449] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   41.418564][ T8449] Cannot create hsr debugfs directory
[   41.445730][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   41.482910][ T8455] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.490223][ T8455] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.497819][ T8455] device bridge_slave_0 entered promiscuous mode
[   41.505410][ T8455] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.512491][ T8455] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.520039][ T8455] device bridge_slave_1 entered promiscuous mode
[   41.531420][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   41.539791][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   41.548857][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   41.557693][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   41.566235][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   41.574515][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   41.582645][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   41.591061][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   41.599655][ T8445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   41.607776][ T8451] team0: Port device team_slave_0 added
[   41.626123][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   41.640566][ T8447] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   41.651203][ T8451] team0: Port device team_slave_1 added
[   41.663733][ T8455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.673651][ T8447] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   41.697444][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   41.705033][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   41.715627][ T8447] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   41.727465][ T8455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   41.741346][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state
[   41.749230][ T8453] bridge0: port 1(bridge_slave_0) entered disabled state
[   41.756979][ T8453] device bridge_slave_0 entered promiscuous mode
[   41.764140][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.771111][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.797448][ T8451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.808655][ T8447] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   41.820840][ T8445] 8021q: adding VLAN 0 to HW filter on device batadv0
[   41.830912][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state
[   41.838593][ T8453] bridge0: port 2(bridge_slave_1) entered disabled state
[   41.846182][ T8453] device bridge_slave_1 entered promiscuous mode
[   41.853030][ T8451] batman_adv: batadv0: Adding interface: batadv_slave_1
[   41.860127][ T8451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.886233][ T8090] Bluetooth: hci0: command 0x0409 tx timeout
[   41.886315][ T8451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   41.904938][ T8455] team0: Port device team_slave_0 added
[   41.928113][ T8453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   41.938085][ T8455] team0: Port device team_slave_1 added
[   41.952168][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_0
[   41.959681][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   41.986344][ T8455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   41.998367][ T8455] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.005658][ T8455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.024083][   T19] Bluetooth: hci1: command 0x0409 tx timeout
[   42.035942][ T8455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.056011][ T8453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   42.083322][ T8455] device hsr_slave_0 entered promiscuous mode
[   42.090105][ T8455] device hsr_slave_1 entered promiscuous mode
[   42.096464][ T8455] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.104592][ T8455] Cannot create hsr debugfs directory
[   42.111576][ T8451] device hsr_slave_0 entered promiscuous mode
[   42.118188][ T8451] device hsr_slave_1 entered promiscuous mode
[   42.124703][ T8451] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.132425][ T8451] Cannot create hsr debugfs directory
[   42.139888][ T8449] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   42.148625][ T8449] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   42.162254][ T8453] team0: Port device team_slave_0 added
[   42.172131][ T8453] team0: Port device team_slave_1 added
[   42.184014][ T8953] Bluetooth: hci2: command 0x0409 tx timeout
[   42.191915][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   42.200689][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   42.209516][ T8449] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   42.219659][ T8449] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   42.251832][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_0
[   42.260567][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.287609][ T8453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   42.299610][ T8453] batman_adv: batadv0: Adding interface: batadv_slave_1
[   42.306831][ T8453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   42.332901][ T8453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   42.349726][ T8445] device veth0_vlan entered promiscuous mode
[   42.354118][ T8088] Bluetooth: hci3: command 0x0409 tx timeout
[   42.362183][ T8445] device veth1_vlan entered promiscuous mode
[   42.382895][ T8455] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   42.392901][ T8455] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   42.412352][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   42.420493][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   42.429311][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   42.437943][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   42.445969][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   42.468024][ T8455] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   42.494096][ T8453] device hsr_slave_0 entered promiscuous mode
[   42.500888][ T8453] device hsr_slave_1 entered promiscuous mode
[   42.507665][ T8088] Bluetooth: hci4: command 0x0409 tx timeout
[   42.513742][ T8453] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   42.521926][ T8453] Cannot create hsr debugfs directory
[   42.535417][ T8455] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   42.555595][ T8445] device veth0_macvtap entered promiscuous mode
[   42.565910][ T8445] device veth1_macvtap entered promiscuous mode
[   42.581797][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   42.590849][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[   42.598115][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   42.606789][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   42.615607][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   42.623417][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   42.646763][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0
[   42.665840][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.681577][ T8447] 8021q: adding VLAN 0 to HW filter on device bond0
[   42.690330][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   42.700571][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.710226][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1
[   42.720669][ T8449] 8021q: adding VLAN 0 to HW filter on device team0
[   42.728352][ T8451] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   42.742601][ T8447] 8021q: adding VLAN 0 to HW filter on device team0
[   42.750173][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.758949][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.768597][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   42.776317][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.784467][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   42.792306][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.801620][ T8445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   42.810568][ T8445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   42.819763][ T8445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   42.828664][ T8445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   42.849911][ T8451] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   42.859095][ T8451] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   42.872852][ T8451] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   42.882588][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   42.892061][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   42.900602][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.907778][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.915684][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   42.931966][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   42.941358][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   42.951821][   T19] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.958944][   T19] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.967140][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   42.975820][   T19] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   42.984263][   T19] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.991369][   T19] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.000339][ T8453] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   43.018251][ T8453] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   43.029476][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   43.037549][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.046245][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.055095][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.063327][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.070522][ T8953] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.105679][ T8453] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   43.125686][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.135110][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.143588][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.153077][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.162328][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.170897][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.179172][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.194812][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.206527][ T8449] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.217379][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.226170][ T8449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   43.236208][ T8453] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   43.245846][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   43.253641][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   43.261322][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.269543][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.296063][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.303777][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   43.305568][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   43.311768][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   43.322077][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   43.335628][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.344481][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   43.372467][ T8455] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.386945][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0
[   43.395787][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   43.406489][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.416147][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   43.425052][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   43.439978][ T8451] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.448832][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
23:12:12 executing program 0:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x8000005})

[   43.490788][ T8451] 8021q: adding VLAN 0 to HW filter on device team0
[   43.508662][ T8455] 8021q: adding VLAN 0 to HW filter on device team0
[   43.518006][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   43.527777][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
23:12:12 executing program 0:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x8000005})

[   43.537428][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.556781][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.565414][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   43.573590][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.582599][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   43.590854][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.606416][ T8447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   43.618947][ T8447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
23:12:13 executing program 0:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000000c0)={0x8000005})

[   43.639283][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   43.648135][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.657075][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.671307][ T8088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.679832][ T8088] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.687088][ T8088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.706712][ T8449] device veth0_vlan entered promiscuous mode
[   43.734786][ T8453] 8021q: adding VLAN 0 to HW filter on device bond0
[   43.744099][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   43.751830][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.762820][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.772755][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
23:12:13 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

[   43.779851][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.787978][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.796849][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.806055][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   43.815015][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.823485][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   43.832158][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.842223][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.849514][ T8090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.858173][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   43.870366][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.885350][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.892881][ T8090] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.901002][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   43.910251][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   43.919684][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
23:12:13 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

[   43.928343][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   43.942981][ T8449] device veth1_vlan entered promiscuous mode
[   43.953826][    T5] Bluetooth: hci0: command 0x041b tx timeout
[   43.967987][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   43.976668][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   43.984645][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   43.992712][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.001864][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.012825][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.023216][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.032093][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.040711][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.064330][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.072758][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
23:12:13 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

[   44.085214][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.093918][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.103722][ T9748] Bluetooth: hci1: command 0x041b tx timeout
[   44.106884][ T8455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.123388][ T8455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
23:12:13 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

[   44.139766][ T8453] 8021q: adding VLAN 0 to HW filter on device team0
[   44.160742][ T8447] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.189911][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.198120][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.208791][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.218545][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.229216][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   44.237553][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   44.248159][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.256932][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.263584][ T3667] Bluetooth: hci2: command 0x041b tx timeout
[   44.268178][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.279556][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.289541][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.297610][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.317469][ T8451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.325554][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.332929][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.348777][ T8455] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.361966][ T8449] device veth0_macvtap entered promiscuous mode
[   44.377981][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.386637][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.395411][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   44.404172][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   44.412506][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.419691][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state
[   44.427740][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.435307][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.453443][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   44.461423][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   44.472684][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   44.482365][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   44.490657][ T3667] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.497817][ T3667] bridge0: port 2(bridge_slave_1) entered forwarding state
[   44.505898][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   44.515694][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   44.524575][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   44.532794][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   44.541820][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   44.550322][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   44.560805][ T3667] Bluetooth: hci3: command 0x041b tx timeout
[   44.572898][ T8449] device veth1_macvtap entered promiscuous mode
[   44.581753][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   44.590115][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   44.598414][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.607866][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.616321][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   44.624546][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   44.632875][ T9748] Bluetooth: hci4: command 0x041b tx timeout
[   44.636539][ T8451] 8021q: adding VLAN 0 to HW filter on device batadv0
[   44.647153][ T8447] device veth0_vlan entered promiscuous mode
[   44.659609][ T8447] device veth1_vlan entered promiscuous mode
[   44.666201][   T19] Bluetooth: hci5: command 0x041b tx timeout
[   44.674940][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   44.682586][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   44.690456][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   44.698428][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   44.706734][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   44.723823][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.732826][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.748653][ T8453] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   44.760156][ T8453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   44.785202][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   44.793220][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   44.802050][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   44.810564][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   44.819327][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   44.831092][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   44.841626][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.852515][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_0
[   44.868146][ T8447] device veth0_macvtap entered promiscuous mode
[   44.875823][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   44.885672][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   44.894594][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   44.903056][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   44.912278][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   44.921290][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   44.929113][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   44.938562][ T8449] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   44.951191][ T8449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   44.962464][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_1
[   44.974405][ T8451] device veth0_vlan entered promiscuous mode
[   44.983119][ T8447] device veth1_macvtap entered promiscuous mode
[   44.995296][ T8453] 8021q: adding VLAN 0 to HW filter on device batadv0
[   45.002576][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.010619][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.019412][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.028171][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.036564][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.047089][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.055120][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.074082][ T8451] device veth1_vlan entered promiscuous mode
[   45.089531][ T8449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.098489][ T8449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.108708][ T8449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.117670][ T8449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.135820][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.146596][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.154751][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.162911][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.171733][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   45.182481][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.192561][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   45.203147][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.214031][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.222677][ T8455] device veth0_vlan entered promiscuous mode
[   45.230623][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   45.241160][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.252049][ T8447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   45.262497][ T8447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.273103][ T8447] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.282012][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.289773][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.297638][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.306535][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.315404][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.323967][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.342019][ T8451] device veth0_macvtap entered promiscuous mode
[   45.353452][ T8451] device veth1_macvtap entered promiscuous mode
[   45.370890][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.379391][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.390579][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.399008][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   45.409751][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   45.423024][ T8447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.436988][ T8447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.446327][ T8447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.455311][ T8447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.469134][ T8455] device veth1_vlan entered promiscuous mode
[   45.476094][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.518503][ T8453] device veth0_vlan entered promiscuous mode
[   45.531493][ T8453] device veth1_vlan entered promiscuous mode
[   45.540256][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   45.549229][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   45.558611][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   45.567751][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   45.575523][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   45.584077][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   45.594958][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.605191][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   45.615819][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.626430][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   45.637145][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.648032][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_0
[   45.659997][   T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.677888][   T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.682640][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   45.696245][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.707320][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   45.717850][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.727770][ T8451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   45.738409][ T8451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   45.749143][ T8451] batman_adv: batadv0: Interface activated: batadv_slave_1
[   45.758109][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   45.766416][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   45.775015][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   45.784030][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   45.791773][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   45.800583][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   45.829062][ T8455] device veth0_macvtap entered promiscuous mode
[   45.838556][ T8451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   45.850564][ T8451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   45.859754][ T8451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   45.869259][ T8451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   45.886610][   T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   45.892602][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.911580][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   45.914716][   T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   45.923202][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   45.941594][ T8453] device veth0_macvtap entered promiscuous mode
[   45.951349][ T8455] device veth1_macvtap entered promiscuous mode
[   45.965491][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   45.974173][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   45.981721][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   45.990916][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   46.002963][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   46.014123][ T8453] device veth1_macvtap entered promiscuous mode
[   46.022810][   T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.030553][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.031045][   T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.045389][ T8953] Bluetooth: hci0: command 0x040f tx timeout
[   46.057284][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.067438][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.078012][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.088398][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.099084][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.109894][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.120785][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.131944][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.158760][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   46.170022][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   46.179220][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.187681][   T19] Bluetooth: hci1: command 0x040f tx timeout
[   46.203651][ T9845] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[   46.215362][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.240272][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.255329][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.268063][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.278881][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.291334][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.302161][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.314191][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.326345][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.336606][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[   46.347347][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.347771][   T19] Bluetooth: hci2: command 0x040f tx timeout
[   46.359288][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_0
[   46.373786][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.385335][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.395685][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.406650][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.416936][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.428122][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.438161][ T8453] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.449679][ T8453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.460641][ T8453] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.472544][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   46.481760][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   46.490678][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.499417][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.508536][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.519296][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.529194][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.540005][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.550952][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.561764][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.571694][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.583130][ T8953] Bluetooth: hci3: command 0x040f tx timeout
[   46.589218][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.599584][ T8455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[   46.610554][ T8455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   46.621879][ T8455] batman_adv: batadv0: Interface activated: batadv_slave_1
[   46.636818][ T8453] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.646447][ T8453] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.655612][ T8453] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.664855][   T19] Bluetooth: hci4: command 0x040f tx timeout
[   46.664880][ T8453] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.685261][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.693210][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   46.694568][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.701825][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   46.717531][ T8953] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   46.727041][ T8455] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   46.736731][ T8455] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   46.743254][ T8953] Bluetooth: hci5: command 0x040f tx timeout
[   46.745768][ T8455] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   46.760657][ T8455] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   46.814213][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.822142][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.866005][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   46.895561][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
23:12:16 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4)

23:12:16 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

[   46.921730][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   46.946294][ T2181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   46.955169][ T9748] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   46.980255][ T2181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.008190][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.059220][   T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.067666][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.081100][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.089289][   T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.096809][ T9912] loop3: detected capacity change from 60 to 0
[   47.098763][ T2181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.113291][ T2181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.132189][ T9912] attempt to access beyond end of device
[   47.132189][ T9912] loop3: rw=2049, want=190, limit=60
[   47.140080][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.153284][   T35] audit: type=1804 audit(1610233936.574:2): pid=9912 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir874004865/syzkaller.jNwxew/0/file1/bus" dev="loop3" ino=3 res=1 errno=0
[   47.156002][ T9912] attempt to access beyond end of device
[   47.156002][ T9912] loop3: rw=2049, want=190, limit=60
[   47.184321][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   47.189439][ T9912] Buffer I/O error on dev loop3, logical block 94, lost async page write
[   47.204156][ T9912] attempt to access beyond end of device
[   47.204156][ T9912] loop3: rw=2049, want=230, limit=60
[   47.214249][ T8090] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   47.227385][ T9922] attempt to access beyond end of device
[   47.227385][ T9922] loop3: rw=2049, want=190, limit=60
[   47.250804][ T9922] Buffer I/O error on dev loop3, logical block 94, lost async page write
[   47.263430][ T9922] attempt to access beyond end of device
[   47.263430][ T9922] loop3: rw=2049, want=230, limit=60
[   47.300921][ T9912] attempt to access beyond end of device
[   47.300921][ T9912] loop3: rw=2049, want=190, limit=60
[   47.327481][   T35] audit: type=1804 audit(1610233936.744:3): pid=9927 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir874004865/syzkaller.jNwxew/0/file1/bus" dev="loop3" ino=3 res=1 errno=0
[   47.333924][ T9930] netlink: 'syz-executor.5': attribute type 3 has an invalid length.
[   47.377324][ T9922] attempt to access beyond end of device
[   47.377324][ T9922] loop3: rw=2049, want=230, limit=60
[   47.403405][ T9912] attempt to access beyond end of device
[   47.403405][ T9912] loop3: rw=2049, want=230, limit=60
23:12:16 executing program 3:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

23:12:16 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

23:12:16 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x18, 0x0, 0x1, {0x4, 0x1, 'snmp\x00'}}]}, 0x74}}, 0x0)

23:12:16 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4)

23:12:16 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1806000000000000000000000000ea5bbc2a00000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8b, &(0x7f00000000c0)=""/139, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

23:12:16 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000540)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100fc24ffff000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00030005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc)

23:12:16 executing program 1:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4)

23:12:16 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x18, 0x0, 0x1, {0x4, 0x1, 'snmp\x00'}}]}, 0x74}}, 0x0)

[   47.495136][ T9942] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[   47.510716][ T9944] netlink: 'syz-executor.5': attribute type 3 has an invalid length.
23:12:16 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1806000000000000000000000000ea5bbc2a00000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8b, &(0x7f00000000c0)=""/139, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

23:12:17 executing program 0:
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001940)={&(0x7f0000001900)='rxrpc_conn\x00', r1}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8, 0xfffffffe}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000002ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)

23:12:17 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000540)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100fc24ffff000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00030005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc)

[   47.604282][ T9952] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[   47.619058][ T9954] loop3: detected capacity change from 60 to 0
23:12:17 executing program 1:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   47.645065][ T9954] attempt to access beyond end of device
[   47.645065][ T9954] loop3: rw=2049, want=190, limit=60
[   47.663587][   T35] audit: type=1804 audit(1610233937.075:4): pid=9954 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir874004865/syzkaller.jNwxew/1/file1/bus" dev="loop3" ino=4 res=1 errno=0
[   47.665673][ T9954] attempt to access beyond end of device
[   47.665673][ T9954] loop3: rw=2049, want=190, limit=60
[   47.698610][ T9954] Buffer I/O error on dev loop3, logical block 94, lost async page write
[   47.718708][ T9962] netlink: 'syz-executor.5': attribute type 3 has an invalid length.
[   47.736990][ T9965] Buffer I/O error on dev loop3, logical block 94, lost async page write
23:12:17 executing program 3:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

23:12:17 executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1806000000000000000000000000ea5bbc2a00000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x8b, &(0x7f00000000c0)=""/139, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)

23:12:17 executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x18, 0x0, 0x1, {0x4, 0x1, 'snmp\x00'}}]}, 0x74}}, 0x0)

23:12:17 executing program 0:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   47.753003][ T9966] loop1: detected capacity change from 60 to 0
23:12:17 executing program 4:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

23:12:17 executing program 5:
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000540)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100fc24ffff000000000000000000037515fa2c1ec28656aaa79bb94b44fe000000bc00030005000000140000270400117c22ebc20521400000d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd2000175e63fb8d38a8700"/252, 0xfc)

[   47.859565][ T9978] loop0: detected capacity change from 60 to 0
[   47.861259][ T9974] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[   47.894344][   T35] audit: type=1804 audit(1610233937.315:5): pid=9966 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir470969683/syzkaller.qZjhE9/4/file1/bus" dev="loop1" ino=5 res=1 errno=0
[   47.907672][ T9978] Buffer I/O error on dev loop0, logical block 94, lost async page write
[   47.923656][ T9966] Buffer I/O error on dev loop1, logical block 94, lost async page write
[   47.933133][ T9978] Buffer I/O error on dev loop0, logical block 94, lost async page write
23:12:17 executing program 0:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   47.958511][ T9984] loop3: detected capacity change from 60 to 0
[   47.973327][   T35] audit: type=1804 audit(1610233937.325:6): pid=9978 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir068133954/syzkaller.qGYiGV/11/file1/bus" dev="loop0" ino=6 res=1 errno=0
[   47.994957][ T9983] Buffer I/O error on dev loop1, logical block 94, lost async page write
[   48.009224][ T9989] loop4: detected capacity change from 60 to 0
[   48.033340][   T35] audit: type=1804 audit(1610233937.455:7): pid=9984 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir874004865/syzkaller.jNwxew/2/file1/bus" dev="loop3" ino=7 res=1 errno=0
[   48.036050][ T9991] netlink: 'syz-executor.5': attribute type 3 has an invalid length.
[   48.066488][ T9984] Buffer I/O error on dev loop3, logical block 94, lost async page write
23:12:17 executing program 2:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   48.082314][ T9984] Buffer I/O error on dev loop3, logical block 94, lost async page write
[   48.103023][ T9748] Bluetooth: hci0: command 0x0419 tx timeout
23:12:17 executing program 1:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   48.175537][   T35] audit: type=1804 audit(1610233937.595:8): pid=9989 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir704950526/syzkaller.79R1nJ/4/file1/bus" dev="loop4" ino=8 res=1 errno=0
23:12:17 executing program 3:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

23:12:17 executing program 5:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

23:12:17 executing program 4:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   48.262841][ T9748] Bluetooth: hci1: command 0x0419 tx timeout
[   48.294260][T10003] loop2: detected capacity change from 60 to 0
[   48.321187][   T35] audit: type=1804 audit(1610233937.735:9): pid=10010 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir068133954/syzkaller.qGYiGV/12/bus" dev="sda1" ino=15781 res=1 errno=0
[   48.365373][   T35] audit: type=1804 audit(1610233937.785:10): pid=10011 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir396785720/syzkaller.RKMTXk/4/file1/bus" dev="sda1" ino=15782 res=1 errno=0
[   48.416366][T10001] loop0: detected capacity change from 60 to 0
[   48.423521][ T8953] Bluetooth: hci2: command 0x0419 tx timeout
[   48.435985][T10008] loop1: detected capacity change from 60 to 0
[   48.451214][   T35] audit: type=1804 audit(1610233937.865:11): pid=10013 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir470969683/syzkaller.qZjhE9/5/bus" dev="sda1" ino=15788 res=1 errno=0
[   48.575891][T10028] loop4: detected capacity change from 60 to 0
23:12:18 executing program 4:
syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000380)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f0000000000)='./file1\x00')
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r0, 0xffff)
r1 = socket(0xa, 0x3, 0x3)
umount2(0x0, 0x0)
r2 = socket(0xa, 0x3, 0x3)
r3 = dup2(r1, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
lseek(r0, 0x0, 0x2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r0, r4, 0x0, 0x8400fffffffa)
sendfile(r0, r4, 0x0, 0xfffffff0)
creat(0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00')

[   48.637010][T10031] loop5: detected capacity change from 60 to 0
[   48.673655][ T8090] Bluetooth: hci3: command 0x0419 tx timeout
[   48.682072][T10032] loop3: detected capacity change from 60 to 0
[   48.742941][ T8953] Bluetooth: hci4: command 0x0419 tx timeout
[   48.824173][ T8953] Bluetooth: hci5: command 0x0419 tx timeout
[   48.888329][T10044] loop4: detected capacity change from 60 to 0
[   49.088505][T10010] ==================================================================
[   49.096627][T10010] BUG: KCSAN: data-race in generic_file_buffered_read / generic_write_end
[   49.105134][T10010] 
[   49.107460][T10010] write to 0xffff88810db05310 of 8 bytes by task 10012 on cpu 0:
[   49.115201][T10010]  generic_write_end+0x98/0x250
[   49.120064][T10010]  ext4_da_write_end+0x59b/0x760
[   49.125013][T10010]  generic_perform_write+0x23e/0x3a0
[   49.130314][T10010]  ext4_buffered_write_iter+0x2e5/0x3d0
[   49.135879][T10010]  ext4_file_write_iter+0x45e/0x1090
[   49.141186][T10010]  do_iter_readv_writev+0x2cb/0x360
[   49.146396][T10010]  do_iter_write+0x112/0x4b0
[   49.151084][T10010]  vfs_iter_write+0x4c/0x70
[   49.155590][T10010]  iter_file_splice_write+0x42a/0x780
[   49.161001][T10010]  direct_splice_actor+0x80/0xa0
[   49.165963][T10010]  splice_direct_to_actor+0x345/0x650
[   49.171342][T10010]  do_splice_direct+0xf5/0x170
[   49.176113][T10010]  do_sendfile+0x5db/0xca0
[   49.180563][T10010]  __x64_sys_sendfile64+0xf2/0x130
[   49.185679][T10010]  do_syscall_64+0x39/0x80
[   49.190121][T10010]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   49.196019][T10010] 
[   49.198436][T10010] read to 0xffff88810db05310 of 8 bytes by task 10010 on cpu 1:
[   49.206064][T10010]  generic_file_buffered_read+0x2a1/0x9a0
[   49.211800][T10010]  generic_file_read_iter+0x80/0x3d0
[   49.217103][T10010]  ext4_file_read_iter+0x2d0/0x420
[   49.222253][T10010]  generic_file_splice_read+0x22a/0x310
[   49.228046][T10010]  splice_direct_to_actor+0x2aa/0x650
[   49.233434][T10010]  do_splice_direct+0xf5/0x170
[   49.238260][T10010]  do_sendfile+0x5db/0xca0
[   49.242683][T10010]  __x64_sys_sendfile64+0xf2/0x130
[   49.247847][T10010]  do_syscall_64+0x39/0x80
[   49.252280][T10010]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   49.258200][T10010] 
[   49.260519][T10010] Reported by Kernel Concurrency Sanitizer on:
[   49.266772][T10010] CPU: 1 PID: 10010 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0
[   49.276063][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   49.286299][T10010] ==================================================================
[   49.294724][T10010] Kernel panic - not syncing: panic_on_warn set ...
[   49.301313][T10010] CPU: 1 PID: 10010 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0
[   49.310157][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   49.320231][T10010] Call Trace:
[   49.323517][T10010]  dump_stack+0x116/0x15d
[   49.327871][T10010]  panic+0x1e7/0x5fa
[   49.331871][T10010]  ? vprintk_emit+0x2e2/0x360
[   49.336565][T10010]  kcsan_report+0x67b/0x680
[   49.341099][T10010]  ? kcsan_setup_watchpoint+0x47b/0x4e0
[   49.347537][T10010]  ? generic_file_buffered_read+0x2a1/0x9a0
[   49.353534][T10010]  ? generic_file_read_iter+0x80/0x3d0
[   49.359019][T10010]  ? ext4_file_read_iter+0x2d0/0x420
[   49.364323][T10010]  ? generic_file_splice_read+0x22a/0x310
[   49.370058][T10010]  ? splice_direct_to_actor+0x2aa/0x650
[   49.375642][T10010]  ? do_splice_direct+0xf5/0x170
[   49.380677][T10010]  ? do_sendfile+0x5db/0xca0
[   49.385378][T10010]  ? __x64_sys_sendfile64+0xf2/0x130
[   49.390710][T10010]  ? do_syscall_64+0x39/0x80
[   49.395308][T10010]  ? entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   49.401385][T10010]  ? generic_file_buffered_read_get_pages+0xa9e/0xaf0
[   49.408243][T10010]  kcsan_setup_watchpoint+0x47b/0x4e0
[   49.413636][T10010]  generic_file_buffered_read+0x2a1/0x9a0
[   49.419391][T10010]  ? ___cache_free+0x3c/0x2f0
[   49.424171][T10010]  generic_file_read_iter+0x80/0x3d0
[   49.429558][T10010]  ? aa_file_perm+0x132/0xdb0
[   49.434273][T10010]  ext4_file_read_iter+0x2d0/0x420
[   49.439395][T10010]  generic_file_splice_read+0x22a/0x310
[   49.444955][T10010]  ? splice_shrink_spd+0x60/0x60
[   49.449909][T10010]  splice_direct_to_actor+0x2aa/0x650
[   49.455303][T10010]  ? do_splice_direct+0x170/0x170
[   49.460336][T10010]  do_splice_direct+0xf5/0x170
[   49.465200][T10010]  do_sendfile+0x5db/0xca0
[   49.469635][T10010]  __x64_sys_sendfile64+0xf2/0x130
[   49.474764][T10010]  do_syscall_64+0x39/0x80
[   49.479211][T10010]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   49.485128][T10010] RIP: 0033:0x45e219
[   49.489052][T10010] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   49.508665][T10010] RSP: 002b:00007ff712509c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   49.517079][T10010] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219
[   49.525054][T10010] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005
[   49.533028][T10010] RBP: 000000000119c070 R08: 0000000000000000 R09: 0000000000000000
[   49.541020][T10010] R10: 00008400fffffffa R11: 0000000000000246 R12: 000000000119c034
[   49.549099][T10010] R13: 00007ffefece37df R14: 00007ff71250a9c0 R15: 000000000119c034
[   49.557959][T10010] Kernel Offset: disabled
[   49.562282][T10010] Rebooting in 86400 seconds..