[ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.122' (ECDSA) to the list of known hosts. 2020/09/24 09:00:09 fuzzer started 2020/09/24 09:00:09 dialing manager at 10.128.0.105:44973 2020/09/24 09:00:10 syscalls: 3216 2020/09/24 09:00:10 code coverage: enabled 2020/09/24 09:00:10 comparison tracing: enabled 2020/09/24 09:00:10 extra coverage: extra coverage is not supported by the kernel 2020/09/24 09:00:10 setuid sandbox: enabled 2020/09/24 09:00:10 namespace sandbox: enabled 2020/09/24 09:00:10 Android sandbox: enabled 2020/09/24 09:00:10 fault injection: enabled 2020/09/24 09:00:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/24 09:00:10 net packet injection: enabled 2020/09/24 09:00:10 net device setup: enabled 2020/09/24 09:00:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/09/24 09:00:10 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/24 09:00:10 USB emulation: /dev/raw-gadget does not exist 2020/09/24 09:00:10 hci packet injection: enabled 2020/09/24 09:00:10 wifi device emulation: enabled 09:01:48 executing program 0: syzkaller login: [ 139.706655] audit: type=1400 audit(1600938108.522:8): avc: denied { execmem } for pid=6483 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 09:01:48 executing program 1: 09:01:48 executing program 2: 09:01:49 executing program 3: 09:01:49 executing program 4: 09:01:49 executing program 5: [ 140.925126] IPVS: ftp: loaded support on port[0] = 21 [ 141.103804] chnl_net:caif_netlink_parms(): no params data found [ 141.128082] IPVS: ftp: loaded support on port[0] = 21 [ 141.256812] IPVS: ftp: loaded support on port[0] = 21 [ 141.303382] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.310201] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.318517] device bridge_slave_0 entered promiscuous mode [ 141.417584] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.424443] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.431820] device bridge_slave_1 entered promiscuous mode [ 141.470324] chnl_net:caif_netlink_parms(): no params data found [ 141.498911] IPVS: ftp: loaded support on port[0] = 21 [ 141.509538] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 141.552145] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 141.650836] IPVS: ftp: loaded support on port[0] = 21 [ 141.660289] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 141.682396] team0: Port device team_slave_0 added [ 141.738545] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 141.747308] team0: Port device team_slave_1 added [ 141.768988] IPVS: ftp: loaded support on port[0] = 21 [ 141.883630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.890651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.917098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.940931] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.947466] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.955708] device bridge_slave_0 entered promiscuous mode [ 141.969736] chnl_net:caif_netlink_parms(): no params data found [ 141.987880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.994528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.019853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.032967] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.039462] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.046990] device bridge_slave_1 entered promiscuous mode [ 142.075762] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.126604] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.143867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.197413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.257188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 142.265250] team0: Port device team_slave_0 added [ 142.275659] device hsr_slave_0 entered promiscuous mode [ 142.281345] device hsr_slave_1 entered promiscuous mode [ 142.287710] chnl_net:caif_netlink_parms(): no params data found [ 142.302115] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 142.311052] team0: Port device team_slave_1 added [ 142.320151] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.331994] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.425007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.431331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.459957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.477435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.483701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.511237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.525716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 142.582830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 142.619839] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.627086] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.635593] device bridge_slave_0 entered promiscuous mode [ 142.715067] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.721473] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.730157] device bridge_slave_1 entered promiscuous mode [ 142.745756] device hsr_slave_0 entered promiscuous mode [ 142.751422] device hsr_slave_1 entered promiscuous mode [ 142.759130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 142.799908] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 142.812555] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 142.825888] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.832300] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.840454] device bridge_slave_0 entered promiscuous mode [ 142.848443] chnl_net:caif_netlink_parms(): no params data found [ 142.869675] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 142.877824] chnl_net:caif_netlink_parms(): no params data found [ 142.888714] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.895477] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.902737] device bridge_slave_1 entered promiscuous mode [ 142.935573] Bluetooth: hci0: command 0x0409 tx timeout [ 142.963232] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.022314] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.031002] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.038407] team0: Port device team_slave_0 added [ 143.049927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.057675] team0: Port device team_slave_1 added [ 143.083911] Bluetooth: hci1: command 0x0409 tx timeout [ 143.161161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.168471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.194884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.207445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.213705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.240422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.250924] Bluetooth: hci2: command 0x0409 tx timeout [ 143.261582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.268947] team0: Port device team_slave_0 added [ 143.282710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.307190] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.316077] team0: Port device team_slave_1 added [ 143.331401] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.401022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.408546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.423811] Bluetooth: hci3: command 0x0409 tx timeout [ 143.434402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.460015] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.471021] device hsr_slave_0 entered promiscuous mode [ 143.478009] device hsr_slave_1 entered promiscuous mode [ 143.492641] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.501678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.508879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.534420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.557434] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.571309] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.577936] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.587146] device bridge_slave_0 entered promiscuous mode [ 143.594903] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 143.602066] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.609801] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.617585] device bridge_slave_1 entered promiscuous mode [ 143.628443] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 143.650926] Bluetooth: hci4: command 0x0409 tx timeout [ 143.651187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 143.663497] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.672315] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.680320] device bridge_slave_0 entered promiscuous mode [ 143.708792] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.720910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.738823] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.746125] Bluetooth: hci5: command 0x0409 tx timeout [ 143.751971] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.760153] device bridge_slave_1 entered promiscuous mode [ 143.822522] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.845938] device hsr_slave_0 entered promiscuous mode [ 143.851605] device hsr_slave_1 entered promiscuous mode [ 143.858251] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 143.876172] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 143.902236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.909735] team0: Port device team_slave_0 added [ 143.917021] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 143.924971] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 143.932473] team0: Port device team_slave_1 added [ 143.964773] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 143.972469] team0: Port device team_slave_0 added [ 143.988594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.995196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.021627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.036420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.042697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.068134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.096507] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 144.105633] team0: Port device team_slave_1 added [ 144.111369] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.136749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.155093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.224263] device hsr_slave_0 entered promiscuous mode [ 144.231041] device hsr_slave_1 entered promiscuous mode [ 144.239885] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.252464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.261468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.288437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.300840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.307984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.334101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.350935] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.360054] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.371604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.379643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.389812] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 144.402147] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.424009] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 144.473275] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.480140] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.507512] device hsr_slave_0 entered promiscuous mode [ 144.513201] device hsr_slave_1 entered promiscuous mode [ 144.535173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 144.555928] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 144.563318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.572383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.580675] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.587231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.594858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.604778] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 144.612407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 144.634253] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 144.645271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.657278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.665191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.672868] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.679277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.689383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 144.731987] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 144.738775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 144.753117] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 144.766811] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 144.812583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.820985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.829332] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.837958] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.847731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 144.868985] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 144.889039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.897532] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.906645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.913590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.928278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 144.942670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.951788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.971684] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 144.978800] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.989798] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.003828] Bluetooth: hci0: command 0x041b tx timeout [ 145.020192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.030023] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.047989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.060049] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.068325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.078563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.087559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.095950] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.102295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.110212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.118686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.135193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.162757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.170748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.173852] Bluetooth: hci1: command 0x041b tx timeout [ 145.184563] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.192183] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.198655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.212733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.226497] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 145.246794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.257696] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 145.277644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.290079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.297353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.305449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.312202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.334181] Bluetooth: hci2: command 0x041b tx timeout [ 145.341577] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.351154] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.358926] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.372960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.381098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.391489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.403253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.423431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.430361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.438993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.448578] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 145.458520] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 145.467678] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 145.484258] Bluetooth: hci3: command 0x041b tx timeout [ 145.494359] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.500463] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.512173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.520590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.529300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 145.537369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.545486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.553082] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.559519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.567362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.584947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 145.594086] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 145.608127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.616664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 145.626022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.633518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.642074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.649950] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.656403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.669305] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 145.678963] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 145.699660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 145.710301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.719524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.728241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.734223] Bluetooth: hci4: command 0x041b tx timeout [ 145.742473] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 145.749822] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.759744] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 145.766161] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 145.774797] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 145.782878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.797698] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 145.810386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 145.814046] Bluetooth: hci5: command 0x041b tx timeout [ 145.824756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 145.837669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 145.847223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.856643] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.863009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.870976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.881696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.891890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 145.910633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 145.919445] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 145.928159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.937696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.947623] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.954171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.961315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.969608] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.977556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 145.985740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.996881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.024158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.032633] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.045327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.057549] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.068950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.078271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.087089] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.101938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.109942] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.116727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.130037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.139626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.148149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.155747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.167554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.181068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.191643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.207655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.216036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.223493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.231110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.238682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.246986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.256252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 146.262439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.271939] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.281871] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.294312] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.300350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.311161] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 146.321300] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 146.328853] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 146.335911] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 146.342481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.350907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.358620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.367284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.378461] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.384772] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.398314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.408679] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 146.417244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.425775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.433348] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.439805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.448369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.455638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.463116] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.476194] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 146.490119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.498871] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 146.511475] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 146.518292] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.531055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.539393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.547349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 146.555613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 146.563372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 146.570579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 146.579678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.592265] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 146.603126] device veth0_vlan entered promiscuous mode [ 146.611222] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 146.619848] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 146.630378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 146.637341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.646665] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.655455] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.661833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.669909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.678308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.687528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.695802] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.702178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.710849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.719684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.730481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.742215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 146.760731] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 146.775138] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 146.781203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.798545] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 146.806874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.815697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.822401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.833577] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 146.849007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.866477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.875736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.885792] device veth1_vlan entered promiscuous mode [ 146.894620] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 146.902556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 146.917803] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 146.926751] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 146.937301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.944841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.952908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.962681] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.969110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.976603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 146.985029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 146.996439] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 147.007640] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.017726] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 147.026665] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.038182] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.054155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 147.061642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.070980] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.079470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.088626] Bluetooth: hci0: command 0x040f tx timeout [ 147.091065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 147.105911] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.119245] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.131036] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 147.144134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.153305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.176091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.183571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.194889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.203875] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.211140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.219776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.237434] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 147.244752] Bluetooth: hci1: command 0x040f tx timeout [ 147.250840] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.259730] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.268900] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.277292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.285888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 147.296959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 147.304922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 147.312555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.323293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.331432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.339891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.348572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.360505] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.372121] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 147.387591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.399997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.408558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.417809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.426789] Bluetooth: hci2: command 0x040f tx timeout [ 147.429633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 147.442489] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.449357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.460572] device veth0_macvtap entered promiscuous mode [ 147.470518] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 147.478424] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 147.486373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.493352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.500561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.509105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.521406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.537033] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 147.548698] device veth0_vlan entered promiscuous mode [ 147.561742] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 147.570461] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 147.574180] Bluetooth: hci3: command 0x040f tx timeout [ 147.578140] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 147.588933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.597081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.606996] device veth1_macvtap entered promiscuous mode [ 147.620126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 147.631428] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 147.638960] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.653410] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 147.664366] device veth1_vlan entered promiscuous mode [ 147.683439] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 147.695010] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 147.702415] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.727411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 147.735587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 147.747098] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 147.755175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.766931] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.779893] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 147.788293] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 147.795983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 147.802978] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 147.812802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 147.822156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 147.830454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.837597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.844953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 147.852784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 147.862211] device veth0_vlan entered promiscuous mode [ 147.867668] Bluetooth: hci4: command 0x040f tx timeout [ 147.879197] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 147.889346] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 147.894863] Bluetooth: hci5: command 0x040f tx timeout [ 147.899568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.924283] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 147.931093] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 147.940263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 147.995872] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.002677] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.012810] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.048123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.057417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.069263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.080903] device veth1_vlan entered promiscuous mode [ 148.087378] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.095013] device veth0_macvtap entered promiscuous mode [ 148.101466] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 148.112027] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.120108] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 148.127881] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 148.155507] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.166931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.179479] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.189351] device veth1_macvtap entered promiscuous mode [ 148.202712] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 148.227321] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 148.243555] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.255198] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 148.266778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 148.282535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.299912] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.308323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.316172] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.323270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.331864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.339861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.348184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.357456] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.365812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.375576] device veth0_vlan entered promiscuous mode [ 148.386497] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 148.398473] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.413498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.430723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.441453] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 148.449610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.457897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.466335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.475054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.482762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.494708] device veth1_vlan entered promiscuous mode [ 148.500568] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.515595] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 148.532853] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 148.543673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 148.554789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.565020] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 148.571886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.580178] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.587730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.595441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.603178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.616006] device veth0_macvtap entered promiscuous mode [ 148.632947] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 148.643042] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 148.650997] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 148.658158] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 148.678559] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 148.695834] device veth1_macvtap entered promiscuous mode [ 148.715149] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 148.730202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.739955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.755555] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.763402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.779784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 148.791129] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 148.814098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.821804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.837028] device veth0_macvtap entered promiscuous mode [ 148.850781] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 148.859392] device veth0_vlan entered promiscuous mode [ 148.872639] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.880903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.894903] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.910581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 148.930963] device veth1_vlan entered promiscuous mode [ 148.938999] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 148.947524] device veth1_macvtap entered promiscuous mode [ 148.955878] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 148.964125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 148.985985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.995899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.006482] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.016842] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 149.024109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.035744] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 149.042776] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 149.052049] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 149.065143] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 149.075412] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 149.082875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.104105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 149.111600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.140381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.150786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.161258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.172406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.174353] Bluetooth: hci0: command 0x0419 tx timeout [ 149.182811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.199538] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 149.207155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.229826] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 149.242717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 149.268007] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.281089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.292228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 149.300184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 149.319172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 149.327083] Bluetooth: hci1: command 0x0419 tx timeout [ 149.339792] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 149.347867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.376889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 149.391826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 149.399752] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.413069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.428566] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 149.441873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.454670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.465310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.476055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.486365] Bluetooth: hci2: command 0x0419 tx timeout [ 149.489026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 149.502017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.513197] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 149.520624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.527498] device veth0_vlan entered promiscuous mode [ 149.541965] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 149.550413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 149.565983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.581690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.592117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.602084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.611312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 149.621404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.631909] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 149.639260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.648950] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 149.655432] Bluetooth: hci3: command 0x0419 tx timeout [ 149.661969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.664418] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 149.677882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.679794] device veth1_vlan entered promiscuous mode [ 149.691420] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 149.712099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 149.723172] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 149.745010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 149.752872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.761638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 149.770327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 149.792968] device veth0_macvtap entered promiscuous mode [ 149.801362] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready 09:01:58 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000000)=""/104, 0x68}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) read(r1, &(0x7f0000000100)=""/244, 0xf4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/10, 0xa}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0xa) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0x896e, 0x0, 0x0, 0x800e00519) r5 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r5, 0x0, 0xffffff8b, 0x0, 0x0, 0x800e00515) shutdown(r3, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r6, &(0x7f00000001c0)={0x10, 0x2}, 0x10) shutdown(r5, 0x0) shutdown(r4, 0x0) [ 149.882034] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 149.894606] Bluetooth: hci4: command 0x0419 tx timeout [ 149.916624] device veth1_macvtap entered promiscuous mode [ 149.938010] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 149.963521] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 149.976807] Bluetooth: hci5: command 0x0419 tx timeout [ 149.982993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.009381] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.016939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.026468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 150.037702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 150.047335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 150.058108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.085393] device veth0_macvtap entered promiscuous mode [ 150.092010] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 150.102353] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 150.119297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.127166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.128839] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.149460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.160695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.171521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.182850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.192643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.203260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.213399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.223261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.233888] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.241035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.250151] device veth1_macvtap entered promiscuous mode [ 150.258181] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 150.265360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 150.272917] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.282829] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 150.290798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.299460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.311593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.322443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.334168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.346026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.356401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.367549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.376814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.386711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.397351] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 150.404712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.420163] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 150.434594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.455437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 09:01:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in=@remote, @in=@broadcast}, {@in=@private=0x2, 0x0, 0x6c}, @in6, {}, {}, {}, 0x0, 0x0, 0xa00}}}, 0xf8}, 0x8}, 0x0) [ 150.486909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 150.522865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:01:59 executing program 1: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c613edffbfccb7d760c69492cc2f855cd6"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() read$char_usb(r2, &(0x7f00000001c0)=""/157, 0x9d) tkill(r3, 0x39) [ 150.571006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.600213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.613325] ptrace attach of "/root/syz-executor.1"[7873] was attempted by "/root/syz-executor.1"[7874] [ 150.624540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.634315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.644726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.654116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:01:59 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ipv6_route\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x19) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) r0 = open(&(0x7f000054eff8)='./bus\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001100)=""/1743, 0x708) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) lchown(&(0x7f00000003c0)='./bus\x00', 0xee00, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 150.663894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.673005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 150.682792] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.695034] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 150.702056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.719773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.738679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.792971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.823201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:01:59 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 150.838131] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 150.864266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.888600] overlayfs: "xino" feature enabled using 1 upper inode bits. [ 150.900711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:01:59 executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 150.916535] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.932647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.944727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 09:01:59 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x0) [ 150.969234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.979762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 150.989802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:01:59 executing program 0: r0 = socket(0x1d, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) dup2(0xffffffffffffffff, r0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sched_setattr(r1, &(0x7f0000000100)={0x38, 0x1, 0x0, 0x0, 0x4}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x1000000c8) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sched_setattr(0x0, &(0x7f0000000400)={0x38, 0x1, 0x0, 0x0, 0x1}, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b8}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 151.018091] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 151.043273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.051970] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 151.079597] can: request_module (can-proto-0) failed. [ 151.094970] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.105911] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 151.119127] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 151.165434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.172611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.224757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.322497] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 151.422233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.447891] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.479164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:02:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in=@remote, @in=@broadcast}, {@in=@private=0x2, 0x0, 0x6c}, @in6}}}, 0xf8}, 0x8}, 0x0) [ 151.580775] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.598393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.619743] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.653195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.670185] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 151.692064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.701244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.722097] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:02:00 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x9}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001840)=""/227, 0xe3}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='status\x00') preadv(r3, &(0x7f00000017c0), 0x375, 0x0, 0x4) [ 151.927791] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 151.962239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.005951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.039346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.111881] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 152.128597] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.143931] IPv6: ADDRCONF(NETDEV_UP): wlan0: link is not ready [ 152.150123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.163851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.172368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 152.234999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 09:02:01 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c61aedffffff00d360aee17a6b2f855cda"], 0x2}}, 0x0) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r3 = gettid() read$char_usb(r2, &(0x7f00000001c0)=""/157, 0x9d) tkill(r3, 0x39) [ 152.282449] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 152.310707] IPv6: ADDRCONF(NETDEV_UP): wlan1: link is not ready [ 152.352162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.391424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.409937] ptrace attach of "/root/syz-executor.4"[8043] was attempted by "/root/syz-executor.4"[8044] [ 152.423260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:02:01 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @dev}, 0x14) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}, 0x0) 09:02:01 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ipv6_route\x00') syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x19) mount(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) mount$overlay(0x400002, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}, {@xino_on='xino=on'}]}) r0 = open(&(0x7f000054eff8)='./bus\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001100)=""/1743, 0x708) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000008c0)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) lchown(&(0x7f00000003c0)='./bus\x00', 0xee00, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f0000000080)='fuse\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 09:02:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@allocspi={0xf8, 0x16, 0x311, 0x0, 0x0, {{{@in=@remote, @in=@broadcast}, {@in=@private, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0xf8}, 0x8}, 0x0) 09:02:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000240)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e6661740402800100024000921efb", 0x16}, {0x0, 0x0, 0x600}], 0x8f00, &(0x7f00000001c0)) 09:02:01 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x4000000000007, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r0, &(0x7f000000be40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="692eeb11", 0x4}], 0x1, &(0x7f0000002b80)=[{0x20, 0x0, 0x0, "b2a87762d3b297420f"}], 0x20}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 09:02:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x11, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@nat={'nat\x00', 0x1b, 0x5, 0x318, 0x140, 0x1e8, 0x1e8, 0x1e8, 0x140, 0x280, 0x280, 0x280, 0x280, 0x280, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @broadcast, @local}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @icmp_id, @gre_key}}}}, {{@ip={@multicast1, @empty, 0x0, 0x0, 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x9}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) connect$inet(r0, &(0x7f0000000000)={0x2, 0xa1, @multicast1}, 0x10) write$FUSE_DIRENT(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="1c8e"], 0x30) 09:02:01 executing program 2: syz_emit_ethernet(0xbe, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @broadcast=0xe0000001}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "6f59ba5f4a67033ddeb6c19bd92b7168378e0fdf6f477fac11a1e745edc17c32", "a967527858e47f4e0c92629775a3cca55301abe491296a1509010020ced8af8be413ceb4553174d4780e817ba7310ac2", "f731a1d9f9be474794588eab658fbe595c2a1610ece33d214735aabf", {"77cc5a1ad9a9e1a43213f907bfebcead", "91116aee49b88ae55224fdfb93da9426"}}}}}}}, 0x0) [ 152.536499] x_tables: duplicate underflow at hook 1 [ 152.552897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.602954] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 152.629311] overlayfs: "xino" feature enabled using 1 upper inode bits. 09:02:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r0, &(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 09:02:01 executing program 3: openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = dup2(r0, r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000002b8, 0x0) [ 152.648864] x_tables: duplicate underflow at hook 1 09:02:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:01 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) [ 152.777027] x_tables: duplicate underflow at hook 2 09:02:01 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000000)=[{&(0x7f0000000100)="eb3c90", 0x3}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000140)={[{@fat=@dos1xfloppy='dos1xfloppy'}]}) 09:02:01 executing program 2: openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="0034a468ac538788a82abbdbad5720c06d40e02d8503a68e2b11c25eed509fa6d88bc00f209a693ceafa7316df00d41ba221d395207783645d63a0c39943f882c4c1cd39380c5867e59d0e681b0f285d83dbd56ecf7e9e5aee1aaf903cf7e9bb40d6d04a563973", 0x1}], 0x8, 0x7fffffff, 0x0) 09:02:01 executing program 0: truncate(0x0, 0xffffffff00000000) 09:02:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 152.954383] audit: type=1804 audit(1600938121.762:9): pid=8095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir337617633/syzkaller.WGoTT0/4/file0" dev="sda1" ino=15766 res=1 [ 153.021175] FAT-fs (loop1): bogus number of reserved sectors [ 153.057962] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (270 sectors) 09:02:01 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x1417c2, 0x0) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) pwritev(r0, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x7ffff000}], 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) syz_mount_image$nfs4(&(0x7f0000000180)='nfs4\x00', 0x0, 0x5, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) fallocate(r1, 0x8, 0x0, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6d002, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/174, 0x1203c00}], 0x1, 0x0, 0x0) syz_mount_image$befs(0x0, 0x0, 0x5, 0x0, 0x0, 0x184084, &(0x7f0000000900)={[{']'}, {'&v$*u'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@appraise_type='appraise_type=imasig'}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 09:02:01 executing program 0: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x105, 0x899, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x12) 09:02:01 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 153.073357] FAT-fs (loop1): Can't find a valid FAT filesystem 09:02:02 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 153.163389] FAT-fs (loop1): bogus number of reserved sectors [ 153.177960] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (270 sectors) [ 153.233582] FAT-fs (loop1): Can't find a valid FAT filesystem 09:02:02 executing program 5: r0 = syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000100)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x10e00}], 0x0, &(0x7f0000000080)) getuid() copy_file_range(r0, &(0x7f0000000240), 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 153.364210] x_tables: duplicate underflow at hook 2 [ 153.370935] FAT-fs (loop0): Directory bread(block 6) failed [ 153.386278] FAT-fs (loop0): Directory bread(block 6) failed [ 153.411492] FAT-fs (loop0): Directory bread(block 6) failed 09:02:02 executing program 3: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x1417c2, 0x0) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) pwritev(r0, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x7ffff000}], 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x8, 0x0, 0x40000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6d002, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/174, 0x1203c00}], 0x1, 0x0, 0x0) syz_mount_image$befs(&(0x7f00000001c0)='befs\x00', &(0x7f0000000200)='./file0\x00', 0x5, 0x0, 0x0, 0x0, 0x0) 09:02:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:02 executing program 1: syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="4a465331010000006076000000000000001000000c343adee64a86d803ee8ad96c9ba4f8532717", 0x27, 0x8000}], 0x0, &(0x7f000006d200)) 09:02:02 executing program 5: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000040)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d202020b12d0c4f202020202020202020202184a728202020200000000019030000230100000000012300000000000000000000000000000000000000000000000000000000000000000100000101000001000884dc", 0x82, 0x8000}, {0x0, 0x0, 0x8a7fc}], 0x0, &(0x7f00000005c0)) 09:02:02 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 153.801830] ================================================================================ [ 153.810641] UBSAN: Undefined behaviour in fs/jfs/jfs_mount.c:385:25 [ 153.817062] shift exponent 13324 is too large for 32-bit type 'int' [ 153.823487] CPU: 1 PID: 8149 Comm: syz-executor.1 Not tainted 4.19.147-syzkaller #0 [ 153.831292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 153.840659] Call Trace: [ 153.843267] dump_stack+0x22c/0x33e [ 153.843795] ISOFS: Bad logical zone size 56452 [ 153.846908] ubsan_epilogue+0xe/0x3a [ 153.846930] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 153.846945] ? __bread_gfp+0x81/0x300 [ 153.846970] ? readSuper+0xf2/0x290 [ 153.868941] chkSuper.cold+0x1e/0x98 [ 153.872673] ? readSuper+0x290/0x290 [ 153.876406] ? do_raw_spin_lock+0xcb/0x220 [ 153.880661] jfs_mount+0x47/0x3d0 [ 153.884135] jfs_fill_super+0x55c/0xb50 [ 153.888121] ? parse_options+0xf50/0xf50 [ 153.892199] ? set_blocksize+0x163/0x3f0 [ 153.896287] mount_bdev+0x2fc/0x3b0 [ 153.899925] ? parse_options+0xf50/0xf50 [ 153.904020] mount_fs+0xa3/0x318 [ 153.907434] vfs_kern_mount.part.0+0x68/0x470 [ 153.911947] do_mount+0x51c/0x2f10 [ 153.915535] ? do_raw_spin_unlock+0x171/0x240 [ 153.920051] ? check_preemption_disabled+0x41/0x2b0 [ 153.925093] ? copy_mount_string+0x40/0x40 [ 153.929373] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 153.934229] ? copy_mount_options+0x261/0x370 [ 153.938745] ksys_mount+0xcf/0x130 [ 153.942301] __x64_sys_mount+0xba/0x150 [ 153.946291] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 153.950888] do_syscall_64+0xf9/0x670 [ 153.954707] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 153.959903] RIP: 0033:0x460bca [ 153.963103] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 153.982052] RSP: 002b:00007f3959f5aa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 153.989780] RAX: ffffffffffffffda RBX: 00007f3959f5ab20 RCX: 0000000000460bca [ 153.997069] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 00007f3959f5aae0 [ 154.004386] RBP: 00007f3959f5aae0 R08: 00007f3959f5ab20 R09: 00000000200000c0 [ 154.011666] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200000c0 [ 154.018944] R13: 0000000020000100 R14: 0000000020000200 R15: 000000002006d200 [ 154.026261] ================================================================================ [ 154.038677] FAT-fs (loop0): Directory bread(block 6) failed 09:02:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map, @map]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 154.065955] FAT-fs (loop0): Directory bread(block 6) failed [ 154.092608] FAT-fs (loop0): Directory bread(block 6) failed [ 154.148230] ISOFS: Bad logical zone size 56452 09:02:03 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:03 executing program 2: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x1417c2, 0x0) close(r0) openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) pwritev(r0, &(0x7f0000002880)=[{&(0x7f0000000580)="12", 0x7ffff000}], 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file0\x00', 0x2a442, 0x0) fallocate(r1, 0x8, 0x0, 0x40000) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6d002, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/174, 0x1203c00}], 0x1, 0x0, 0x0) syz_mount_image$befs(&(0x7f00000001c0)='befs\x00', &(0x7f0000000200)='./file0\x00', 0x5, 0x0, 0x0, 0x0, &(0x7f0000000900)={[{'&v$*u'}], [{@appraise_type='appraise_type=imasig'}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}]}) 09:02:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map, @map]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:03 executing program 5: [ 154.213327] audit: type=1800 audit(1600938123.022:10): pid=8120 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=15769 res=0 [ 154.328478] audit: type=1800 audit(1600938123.022:11): pid=8123 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.2" name="file0" dev="sda1" ino=15769 res=0 [ 154.362753] FAT-fs (loop0): Directory bread(block 6) failed 09:02:03 executing program 5: [ 154.385804] FAT-fs (loop0): Directory bread(block 6) failed [ 154.412865] audit: type=1800 audit(1600938123.032:12): pid=8126 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=15769 res=0 09:02:03 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map, @map]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 154.438272] FAT-fs (loop0): Directory bread(block 6) failed [ 154.468599] ================================================================================ [ 154.477225] UBSAN: Undefined behaviour in fs/jfs/jfs_imap.c:458:7 [ 154.483469] shift exponent -13312 is negative [ 154.487979] CPU: 1 PID: 8149 Comm: syz-executor.1 Not tainted 4.19.147-syzkaller #0 [ 154.495784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.505150] Call Trace: [ 154.507763] dump_stack+0x22c/0x33e [ 154.511411] ubsan_epilogue+0xe/0x3a [ 154.515141] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 154.521307] ? do_raw_spin_unlock+0x171/0x240 [ 154.525822] diReadSpecial.cold+0x1b/0x3e [ 154.529986] jfs_mount+0x83/0x3d0 [ 154.533453] jfs_fill_super+0x55c/0xb50 [ 154.537443] ? parse_options+0xf50/0xf50 [ 154.541521] ? set_blocksize+0x163/0x3f0 [ 154.545604] mount_bdev+0x2fc/0x3b0 [ 154.549243] ? parse_options+0xf50/0xf50 [ 154.553317] mount_fs+0xa3/0x318 [ 154.556704] vfs_kern_mount.part.0+0x68/0x470 [ 154.561220] do_mount+0x51c/0x2f10 [ 154.564779] ? do_raw_spin_unlock+0x171/0x240 [ 154.569285] ? check_preemption_disabled+0x41/0x2b0 [ 154.574313] ? copy_mount_string+0x40/0x40 [ 154.578568] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 154.583425] ? copy_mount_options+0x261/0x370 [ 154.587934] ksys_mount+0xcf/0x130 [ 154.591483] __x64_sys_mount+0xba/0x150 [ 154.595471] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 154.600067] do_syscall_64+0xf9/0x670 [ 154.603887] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.609176] RIP: 0033:0x460bca [ 154.612377] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 154.631298] RSP: 002b:00007f3959f5aa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 154.639027] RAX: ffffffffffffffda RBX: 00007f3959f5ab20 RCX: 0000000000460bca [ 154.646314] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 00007f3959f5aae0 [ 154.653602] RBP: 00007f3959f5aae0 R08: 00007f3959f5ab20 R09: 00000000200000c0 [ 154.660884] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200000c0 [ 154.668172] R13: 0000000020000100 R14: 0000000020000200 R15: 000000002006d200 [ 154.675467] ================================================================================ [ 154.803998] ================================================================================ [ 154.812892] UBSAN: Undefined behaviour in fs/jfs/jfs_imap.c:126:7 [ 154.819137] shift exponent -13312 is negative [ 154.823647] CPU: 1 PID: 8149 Comm: syz-executor.1 Not tainted 4.19.147-syzkaller #0 [ 154.831444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 154.840836] Call Trace: [ 154.843441] dump_stack+0x22c/0x33e [ 154.847088] ubsan_epilogue+0xe/0x3a [ 154.850817] __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250 [ 154.856978] ? diMount+0x4b/0x860 [ 154.860478] ? rcu_read_lock_sched_held+0x174/0x1e0 [ 154.865508] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 154.870366] ? release_metapage+0x24b/0x9e0 [ 154.874700] diMount.cold+0x17/0x1c [ 154.878333] ? diReadSpecial+0x2ed/0x670 [ 154.882412] jfs_mount+0xbf/0x3d0 [ 154.885880] jfs_fill_super+0x55c/0xb50 [ 154.889862] ? parse_options+0xf50/0xf50 [ 154.893939] ? set_blocksize+0x163/0x3f0 [ 154.898017] mount_bdev+0x2fc/0x3b0 [ 154.901654] ? parse_options+0xf50/0xf50 [ 154.905768] mount_fs+0xa3/0x318 [ 154.909153] vfs_kern_mount.part.0+0x68/0x470 [ 154.913659] do_mount+0x51c/0x2f10 [ 154.917218] ? do_raw_spin_unlock+0x171/0x240 [ 154.921723] ? check_preemption_disabled+0x41/0x2b0 [ 154.926752] ? copy_mount_string+0x40/0x40 [ 154.931003] ? kmem_cache_alloc_trace+0x379/0x4b0 [ 154.935859] ? copy_mount_options+0x261/0x370 [ 154.940364] ksys_mount+0xcf/0x130 [ 154.943911] __x64_sys_mount+0xba/0x150 [ 154.947929] ? lockdep_hardirqs_on+0x3c1/0x5e0 [ 154.952560] do_syscall_64+0xf9/0x670 [ 154.956388] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 154.961582] RIP: 0033:0x460bca [ 154.964779] Code: b8 a6 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 dd 87 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 ba 87 fb ff c3 66 0f 1f 84 00 00 00 00 00 [ 154.983693] RSP: 002b:00007f3959f5aa88 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 154.991452] RAX: ffffffffffffffda RBX: 00007f3959f5ab20 RCX: 0000000000460bca [ 154.998842] RDX: 00000000200000c0 RSI: 0000000020000100 RDI: 00007f3959f5aae0 [ 155.006131] RBP: 00007f3959f5aae0 R08: 00007f3959f5ab20 R09: 00000000200000c0 [ 155.013409] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000200000c0 [ 155.020690] R13: 0000000020000100 R14: 0000000020000200 R15: 000000002006d200 [ 155.027982] ================================================================================ 09:02:04 executing program 3: 09:02:04 executing program 5: 09:02:04 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:04 executing program 1: 09:02:04 executing program 5: 09:02:04 executing program 3: [ 155.415604] FAT-fs (loop0): Directory bread(block 6) failed 09:02:04 executing program 2: 09:02:04 executing program 1: 09:02:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:04 executing program 5: [ 155.489686] FAT-fs (loop0): Directory bread(block 6) failed [ 155.516267] FAT-fs (loop0): Directory bread(block 6) failed 09:02:04 executing program 3: 09:02:04 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:04 executing program 5: 09:02:04 executing program 1: 09:02:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:04 executing program 3: 09:02:04 executing program 5: 09:02:04 executing program 1: 09:02:04 executing program 2: 09:02:04 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:04 executing program 5: 09:02:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:04 executing program 3: 09:02:04 executing program 1: 09:02:04 executing program 1: 09:02:04 executing program 5: 09:02:04 executing program 2: 09:02:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:04 executing program 0: openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:04 executing program 3: 09:02:04 executing program 2: 09:02:04 executing program 5: 09:02:04 executing program 1: 09:02:04 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:04 executing program 3: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 5: 09:02:05 executing program 1: 09:02:05 executing program 2: 09:02:05 executing program 3: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x0, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 3: 09:02:05 executing program 5: 09:02:05 executing program 2: 09:02:05 executing program 1: 09:02:05 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:05 executing program 3: 09:02:05 executing program 5: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x0, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 1: 09:02:05 executing program 2: 09:02:05 executing program 5: 09:02:05 executing program 3: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x0, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 0: syz_mount_image$vfat(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:05 executing program 1: 09:02:05 executing program 2: 09:02:05 executing program 3: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x0, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 5: 09:02:05 executing program 1: 09:02:05 executing program 2: 09:02:05 executing program 5: 09:02:05 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:05 executing program 3: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x0, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 2: 09:02:05 executing program 1: 09:02:05 executing program 5: 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x0, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 3: 09:02:05 executing program 2: 09:02:05 executing program 1: 09:02:05 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:05 executing program 2: 09:02:05 executing program 3: 09:02:05 executing program 1: 09:02:05 executing program 5: 09:02:05 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) 09:02:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x0, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:05 executing program 3: 09:02:05 executing program 1: 09:02:05 executing program 5: 09:02:05 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', 0x0, 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd907053e8", 0x25, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:05 executing program 2: 09:02:06 executing program 3: 09:02:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x0, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:06 executing program 5: 09:02:06 executing program 1: 09:02:06 executing program 2: 09:02:06 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:06 executing program 5: 09:02:06 executing program 3: 09:02:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x0, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:06 executing program 1: 09:02:06 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$netlink(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}], 0x20}, 0x0) 09:02:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:06 executing program 3: unshare(0x24020400) 09:02:06 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x0, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:06 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000ffffffffffff8100000086dd6000000700442f00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 09:02:06 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000002400d75700"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000540001"], 0x78}}, 0x0) 09:02:06 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:06 executing program 3: sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x0, 0x70bd2c}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000680)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c0000002c00270d00"/20, @ANYRES32=r2, @ANYBLOB="00000000000000000d00000008000100753332006000020008000b0002000000140005"], 0x8c}}, 0x0) 09:02:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:02:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='D'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8}]}}]}, 0x3c}}, 0x0) 09:02:06 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:06 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc201040000009a87507ebf4e43bc0609b1f4ecdc78eb2b57c099b6ed90e0ebcdac5f7a860c00269c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81070545cab5d5b0da0f0575cc2727e8d974927676468582d8621c3ac94712ed9cf6b40b3cf252a47c05af3a30d57cc3ed67d1867b54d24e2da1856ad3b0f24b52616bf84d3b00127473e6ba922aff649609d40b47ec349ccba3ce8d530ffff19a6471bf3abc742d9cbcfb964b13831034694a6aad86cf08a2c7b2235dc99de9aa3e6b77c7a2877261ed713eec3b86836ae504479f60b0ec9204d2b85627aa5a79f670000000000000000050000008f02712c3d8fc4e2686e21a855e823887196d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb001bafe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893d3626ab5becbcdb887af2c85c2d9ab09b5dd4406d273650bf7b2ff4602aec5eea2000000203d518e0ae81d3de0aeadfe31964c2bb8b3389289e97de8780fea6506c54c410f2b3ed3ca83f7a82ffd35d1cfb44e"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x18000000000002e0, 0xe, 0x0, &(0x7f0000000a40)="b95b03b700030003009e40f086dd", 0x0, 0x0, 0x6000000000000000, 0x1, 0x0, &(0x7f0000000140)="f8", 0x0}, 0x40) 09:02:06 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x67e0317e552b57d7, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x9effffff}}}}]}, 0x78}}, 0x0) 09:02:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:02:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="780000002400d75700"/20, @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100736671004c0002000000000000000000000000080000000000000000000000000000000000000000000000524ad3d8a2"], 0x78}}, 0x0) 09:02:06 executing program 3: r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eedffc)=0x7c4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000514ff0)={0x2, 0x4e20}, 0x10) recvfrom$inet(r0, 0x0, 0x9, 0x2000, 0x0, 0x0) 09:02:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) [ 157.779297] FAT-fs (loop0): bogus number of reserved sectors [ 157.801053] FAT-fs (loop0): Can't find a valid FAT filesystem 09:02:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:02:06 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:06 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@remote, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}}}, 0x0) 09:02:06 executing program 1: [ 157.920540] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:02:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x4}]}}]}, 0x3c}}, 0x0) 09:02:06 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) [ 158.035948] FAT-fs (loop0): bogus number of reserved sectors [ 158.060091] FAT-fs (loop0): Can't find a valid FAT filesystem 09:02:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:06 executing program 2: syz_emit_ethernet(0x3a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4, 0x3}]}}, @timestamp_reply}}}}, 0x0) 09:02:06 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x67e0317e552b57d7, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x10, 0x1, 'sfq\x00'}, {0x4c}}]}, 0x78}}, 0x0) 09:02:07 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 158.206325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.243002] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 09:02:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:07 executing program 2: r0 = socket$inet(0x2, 0x3, 0x5) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @multicast2}}) 09:02:07 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:07 executing program 3: syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}, @rr={0x7, 0x3, 0xe3}, @cipso={0x86, 0xd, 0x3, [{0x0, 0x4, "90"}, {0x0, 0x4, "0139"}]}]}}, @timestamp_reply}}}}, 0x0) [ 158.261792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.286118] FAT-fs (loop0): bogus number of reserved sectors [ 158.304688] FAT-fs (loop0): Can't find a valid FAT filesystem [ 158.338780] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. 09:02:07 executing program 2: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr, @multicast1, {[@end]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}}}, 0x0) 09:02:07 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:07 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:02:07 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x67e0317e552b57d7, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c, 0x2, {{0x0, 0x500}}}}]}, 0x78}}, 0x0) 09:02:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x2}]}}]}, 0x3c}}, 0x0) 09:02:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 158.472485] FAT-fs (loop0): Directory bread(block 6) failed [ 158.505134] FAT-fs (loop0): Directory bread(block 6) failed 09:02:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0xc0045878, 0x0) 09:02:07 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 158.542759] FAT-fs (loop0): Directory bread(block 6) failed [ 158.582746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:02:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 09:02:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:02:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) [ 158.616822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 09:02:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x13}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) 09:02:07 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 158.708953] FAT-fs (loop0): Directory bread(block 6) failed [ 158.721203] FAT-fs (loop0): Directory bread(block 6) failed [ 158.730245] FAT-fs (loop0): Directory bread(block 6) failed 09:02:08 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0) 09:02:08 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:08 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYRESHEX], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000002c0)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003b40)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfff2}, {}, {0xa}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x5}}]}}]}, 0x38}}, 0x0) 09:02:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:02:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x1c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x800}]}}, @TCA_BPF_ACT={0x4}]}}]}, 0x48}}, 0x0) 09:02:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:08 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 159.379282] FAT-fs (loop0): Directory bread(block 6) failed [ 159.415741] FAT-fs (loop0): Directory bread(block 6) failed 09:02:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000000000)={'syz_tun\x00', @ifru_data=0x0}) 09:02:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:08 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 159.454570] FAT-fs (loop0): Directory bread(block 6) failed [ 159.649224] FAT-fs (loop0): Directory bread(block 6) failed [ 159.661492] FAT-fs (loop0): Directory bread(block 6) failed [ 159.691000] FAT-fs (loop0): Directory bread(block 6) failed 09:02:09 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)=@qipcrtr, 0x80, 0x0}}], 0x2, 0x0) 09:02:09 executing program 2: syz_emit_ethernet(0x42, &(0x7f00000000c0)={@multicast, @link_local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@end]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private}}}}}}, 0x0) 09:02:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:09 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:09 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000), 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 160.246713] FAT-fs (loop0): Directory bread(block 6) failed [ 160.265993] FAT-fs (loop0): Directory bread(block 6) failed [ 160.278174] FAT-fs (loop0): Directory bread(block 6) failed 09:02:09 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fedbe9d8f3b423cdacfa7e32fe0231368ba38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c300"/195], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='lock_acquire\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000000100)=0x60) 09:02:09 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x1c, 0x2, [@TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x6503}, @TCA_TCINDEX_MASK={0x6}]}}]}, 0x4c}}, 0x0) 09:02:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 160.415137] FAT-fs (loop0): Directory bread(block 6) failed [ 160.441801] FAT-fs (loop0): Directory bread(block 6) failed [ 160.462188] FAT-fs (loop0): Directory bread(block 6) failed 09:02:09 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:09 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0xc000, 0x6, 0x8000, 0x6}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000100)=ANY=[], 0x0) 09:02:09 executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @redirect={0x5, 0x0, 0x0, @rand_addr, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}}}, 0x0) 09:02:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:02:09 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c430", 0x13, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:09 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 161.146890] FAT-fs (loop0): Directory bread(block 6) failed 09:02:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) 09:02:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:10 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = gettid() ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) 09:02:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) [ 161.204637] FAT-fs (loop0): Directory bread(block 6) failed [ 161.235668] FAT-fs (loop0): Directory bread(block 6) failed 09:02:10 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c430", 0x13, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 161.418436] FAT-fs (loop0): Directory bread(block 6) failed [ 161.426456] FAT-fs (loop0): Directory bread(block 6) failed [ 161.432570] FAT-fs (loop0): Directory bread(block 6) failed 09:02:10 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:10 executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x67e0317e552b57d7, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff}}}, 0x24}}, 0x0) 09:02:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:10 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0xfff}) 09:02:10 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c430", 0x13, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:10 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000000c0)) 09:02:10 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) [ 162.072899] FAT-fs (loop0): Directory bread(block 6) failed [ 162.091143] FAT-fs (loop0): Directory bread(block 6) failed 09:02:10 executing program 2: socket$inet_icmp(0x2, 0x2, 0x1) 09:02:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) [ 162.120737] FAT-fs (loop0): Directory bread(block 6) failed 09:02:11 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc84441186", 0x1c, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) [ 162.277936] FAT-fs (loop0): Directory bread(block 6) failed [ 162.286433] FAT-fs (loop0): Directory bread(block 6) failed [ 162.292846] FAT-fs (loop0): Directory bread(block 6) failed 09:02:11 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x680c, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2000000000000182, &(0x7f0000000280)=@framed={{}, [@map, @map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f0000000180)='syzkaller\x00', 0xe2, 0x1000, &(0x7f0000002700)=""/4096}, 0x48) 09:02:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0x67e0317e552b57d7, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x4c}}]}, 0x78}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000200)=ANY=[], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x4}}]}, 0x34}}, 0x0) 09:02:11 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) 09:02:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:11 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc84441186", 0x1c, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:11 executing program 2: syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x74}, @rr={0x7, 0x3, 0xe3}, @cipso={0x86, 0xd, 0x3, [{0x0, 0x3, "90"}, {0x0, 0x4, "0139"}]}]}}, @timestamp_reply}}}}, 0x0) [ 162.950159] FAT-fs (loop0): Directory bread(block 6) failed [ 162.974118] FAT-fs (loop0): Directory bread(block 6) failed 09:02:11 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, 0x0, 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:02:11 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet6_udp(0xa, 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x100000, 0x0) 09:02:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) [ 163.000254] FAT-fs (loop0): Directory bread(block 6) failed 09:02:11 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc84441186", 0x1c, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0) 09:02:11 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) [ 163.176265] FAT-fs (loop0): Directory bread(block 6) failed [ 163.200283] FAT-fs (loop0): Directory bread(block 6) failed [ 163.212028] FAT-fs (loop0): Directory bread(block 6) failed 09:02:12 executing program 5: r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000d85fe4)={0xa, 0x4e23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) recvmsg(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8906, &(0x7f00000001c0)) 09:02:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x1c, 0x2, [@TCA_TCINDEX_CLASSID={0x8}, @TCA_TCINDEX_HASH={0x8}, @TCA_TCINDEX_MASK={0x6}]}}]}, 0x4c}}, 0x0) 09:02:12 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0x2, 0x7d, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x7, &(0x7f0000000280)=@framed={{}, [@map={0x18, 0x0, 0x1, 0x0, r0}, @map={0x18, 0x0, 0x1, 0x0, r0}]}, 0x0, 0xe2, 0x1000, &(0x7f0000002700)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:02:12 executing program 3: r0 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}}, 0x0) 09:02:12 executing program 0: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2, &(0x7f0000000280)=[{&(0x7f00000003c0)="eb3c906d6b66732e66617400028001000240000004f801", 0x17}, {&(0x7f0000000000)="4bce9864645605b28c140df92077e13e19c4302c43b0facc8444118647763f54fd", 0x21, 0x600}], 0x0, &(0x7f0000000040)={[{@iocharset={'iocharset', 0x3d, 'euc-jp'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file0\x00', 0x1415c2, 0x0)