Warning: Permanently added '[localhost]:1069' (ECDSA) to the list of known hosts. 2020/04/16 13:04:45 fuzzer started syzkaller login: [ 140.046777][ T8694] ld (8694) used greatest stack depth: 23320 bytes left 2020/04/16 13:04:49 dialing manager at 10.0.2.10:36171 2020/04/16 13:04:50 syscalls: 2990 2020/04/16 13:04:50 code coverage: enabled 2020/04/16 13:04:50 comparison tracing: enabled 2020/04/16 13:04:50 extra coverage: enabled 2020/04/16 13:04:50 setuid sandbox: enabled 2020/04/16 13:04:50 namespace sandbox: enabled 2020/04/16 13:04:50 Android sandbox: /sys/fs/selinux/policy does not exist 2020/04/16 13:04:50 fault injection: enabled 2020/04/16 13:04:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/04/16 13:04:50 net packet injection: enabled 2020/04/16 13:04:50 net device setup: enabled 2020/04/16 13:04:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/04/16 13:04:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/04/16 13:04:50 USB emulation: /dev/raw-gadget does not exist 13:05:47 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 13:05:48 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='e', @ANYRES16], 0x3) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) 13:05:49 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/crypto\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendfile(r3, r0, 0x0, 0x100000064) [ 200.238629][ T8704] IPVS: ftp: loaded support on port[0] = 21 [ 200.238895][ T8703] IPVS: ftp: loaded support on port[0] = 21 13:05:49 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) [ 200.841667][ T8703] chnl_net:caif_netlink_parms(): no params data found [ 200.885614][ T8707] IPVS: ftp: loaded support on port[0] = 21 [ 200.922192][ T8704] chnl_net:caif_netlink_parms(): no params data found [ 201.084263][ T8710] IPVS: ftp: loaded support on port[0] = 21 [ 201.123545][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.145316][ T8704] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.175555][ T8704] device bridge_slave_0 entered promiscuous mode [ 201.217333][ T8704] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.233758][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.250197][ T8704] device bridge_slave_1 entered promiscuous mode [ 201.266117][ T8703] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.283382][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.303292][ T8703] device bridge_slave_0 entered promiscuous mode [ 201.348495][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.368568][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.389801][ T8703] device bridge_slave_1 entered promiscuous mode [ 201.469358][ T8703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.497216][ T8704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.526882][ T8704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.553704][ T8703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.619191][ T8704] team0: Port device team_slave_0 added [ 201.647071][ T8703] team0: Port device team_slave_0 added [ 201.666058][ T8704] team0: Port device team_slave_1 added [ 201.699751][ T8703] team0: Port device team_slave_1 added [ 201.715699][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.729784][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.787558][ T8704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.814171][ T8704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.827177][ T8704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.868156][ T8704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.907426][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.916914][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.970095][ T8703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.028031][ T8703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.045552][ T8703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.108538][ T8703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.195766][ T8704] device hsr_slave_0 entered promiscuous mode [ 202.283266][ T8704] device hsr_slave_1 entered promiscuous mode [ 202.395852][ T8707] chnl_net:caif_netlink_parms(): no params data found [ 202.535284][ T8703] device hsr_slave_0 entered promiscuous mode [ 202.602853][ T8703] device hsr_slave_1 entered promiscuous mode [ 202.653364][ T8703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.694763][ T8703] Cannot create hsr debugfs directory [ 202.794924][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 202.967536][ T8707] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.984731][ T8707] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.004675][ T8707] device bridge_slave_0 entered promiscuous mode [ 203.029205][ T8707] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.046135][ T8707] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.061968][ T8707] device bridge_slave_1 entered promiscuous mode [ 203.147264][ T8707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.195667][ T8707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.237182][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.252468][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.272863][ T8710] device bridge_slave_0 entered promiscuous mode [ 203.315040][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.333692][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.351060][ T8710] device bridge_slave_1 entered promiscuous mode [ 203.441233][ T8707] team0: Port device team_slave_0 added [ 203.498244][ T8707] team0: Port device team_slave_1 added [ 203.521164][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.564314][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.650672][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.666648][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.754833][ T8707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.824467][ T8707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.861369][ T8707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.961407][ T8707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.013170][ T8710] team0: Port device team_slave_0 added [ 204.038908][ T8704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.127729][ T8704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.237287][ T8710] team0: Port device team_slave_1 added [ 204.269352][ T8704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.340137][ T8704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.468521][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.481386][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.530195][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.570442][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.588109][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.646668][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.726001][ T8707] device hsr_slave_0 entered promiscuous mode [ 204.782947][ T8707] device hsr_slave_1 entered promiscuous mode [ 204.872695][ T8707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.894794][ T8707] Cannot create hsr debugfs directory [ 204.915765][ T8703] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 204.980890][ T8703] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.125540][ T8710] device hsr_slave_0 entered promiscuous mode [ 205.222912][ T8710] device hsr_slave_1 entered promiscuous mode [ 205.302574][ T8710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.321487][ T8710] Cannot create hsr debugfs directory [ 205.338837][ T8703] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 205.396482][ T8703] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 205.706054][ T8707] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.790185][ T8707] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.856761][ T8707] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.946744][ T8707] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.091471][ T8710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.185631][ T8710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.304367][ T8710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.368975][ T8710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.480345][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.529577][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.547663][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.573973][ T8704] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.598832][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 206.612829][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 206.625946][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.640877][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.675994][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 206.704464][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.729003][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 206.749247][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.766622][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.794728][ T8703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.826660][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 206.864947][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 206.910449][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.929940][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.952204][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 206.974059][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.993428][ T8703] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.018248][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.039028][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.068736][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.103833][ T1251] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.138281][ T1251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.164289][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.200641][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.230646][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.264723][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.293133][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.319872][ T210] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.341673][ T210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.377666][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.421492][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.482502][ T8704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.543958][ T8704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 207.575951][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.607463][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.644345][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.702687][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.741632][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.774413][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.795930][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.818847][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.846980][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.878621][ T8710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.907106][ T8704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.930293][ T8707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.954458][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.975254][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.018086][ T8710] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.052897][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.073067][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.090288][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.110317][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.130768][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.149106][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.169925][ T18] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.183739][ T18] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.201738][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.228421][ T8703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.266780][ T8703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.289990][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.310220][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.327790][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 208.346654][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.370195][ T8707] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.416481][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.437737][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.460851][ T210] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.482064][ T210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.504497][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 208.533539][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.559977][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.588627][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.615951][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 208.649594][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 208.699499][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.726279][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 208.748237][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.769751][ T210] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.791226][ T210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.828121][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.857936][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 208.891459][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.929642][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 208.956757][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.980383][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.005771][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.032158][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.056540][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.088208][ T8704] device veth0_vlan entered promiscuous mode [ 209.115277][ T8703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.140124][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.161532][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.194590][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 209.232080][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.250996][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.268896][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.287140][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.304781][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.325205][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.349805][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.367683][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.384384][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.400155][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.416584][ T8704] device veth1_vlan entered promiscuous mode [ 209.439901][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.475600][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 209.514651][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.565819][ T8710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.603572][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 209.635208][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.684770][ T8707] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.729641][ T8707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.766744][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.798897][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 209.827162][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.842772][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.858735][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.884919][ T8704] device veth0_macvtap entered promiscuous mode [ 209.908226][ T8704] device veth1_macvtap entered promiscuous mode [ 209.925622][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.941733][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.962703][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.977728][ T8719] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.014225][ T8703] device veth0_vlan entered promiscuous mode [ 210.031503][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.050143][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.064520][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.096634][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.121293][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.150724][ T3297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.201659][ T8703] device veth1_vlan entered promiscuous mode [ 210.230066][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.263212][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 210.293288][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.318856][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 210.343337][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 210.369047][ T1251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 210.396158][ T8707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.420898][ T8710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.452094][ T8704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.479021][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 210.500214][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 210.529016][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 210.673445][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.692176][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.720117][ T8703] device veth0_macvtap entered promiscuous mode [ 210.889580][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 210.916768][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.942284][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.969969][ T8703] device veth1_macvtap entered promiscuous mode [ 211.005347][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.026236][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.115653][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.148374][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.186591][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.225038][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.259811][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.289158][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.335230][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.379550][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.439598][ T8707] device veth0_vlan entered promiscuous mode [ 211.469584][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 211.501262][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.547812][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.583140][ T8710] device veth0_vlan entered promiscuous mode [ 211.626422][ T8707] device veth1_vlan entered promiscuous mode [ 211.651742][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.684549][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.713336][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.751229][ T8703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 211.792977][ T8703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.831710][ T8703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.884552][ T8710] device veth1_vlan entered promiscuous mode 13:06:00 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1081}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='e', @ANYRES16], 0x3) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 211.928948][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.963729][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 211.997808][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:06:01 executing program 1: [ 212.173011][ T8707] device veth0_macvtap entered promiscuous mode 13:06:01 executing program 1: 13:06:01 executing program 1: [ 212.211400][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.250158][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.295867][ T210] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.398904][ T8707] device veth1_macvtap entered promiscuous mode [ 212.571386][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.600478][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 212.626998][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 212.662246][ T8710] device veth0_macvtap entered promiscuous mode [ 212.692076][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.733091][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.774312][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 212.822272][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.863773][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.905302][ T8710] device veth1_macvtap entered promiscuous mode [ 212.936067][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.971526][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 13:06:02 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) [ 213.003516][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 13:06:02 executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000100)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0xfffffffffffffffd}}]}) [ 213.031313][ T3064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.088433][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.147087][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.176914][ T8707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.203507][ T8707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.233994][ T8707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.271965][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.319143][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.367759][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.411868][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.447460][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 213.475838][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.506995][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.526948][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 213.558682][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 213.594666][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 213.625505][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 213.669250][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.701692][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.723500][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.746388][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.776320][ T8710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 213.811651][ T8710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.848848][ T8710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.876414][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 214.238770][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:06:05 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_hci(r0, 0x0, 0x0, 0x0, 0x0) 13:06:05 executing program 2: 13:06:05 executing program 1: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}, {0x0, 0x0, 0x323}], 0x0, &(0x7f00000000c0)={[{@fat=@debug='debug'}, {@fat=@check_strict='check=strict'}]}) 13:06:05 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 13:06:05 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 13:06:05 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 13:06:05 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) [ 216.671954][ T8775] FAT-fs (loop1): Directory bread(block 2571) failed 13:06:05 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 13:06:05 executing program 2: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) [ 216.737121][ T8775] FAT-fs (loop1): Directory bread(block 2572) failed [ 216.774885][ T8775] FAT-fs (loop1): Directory bread(block 2573) failed [ 216.801340][ T8775] FAT-fs (loop1): Directory bread(block 2574) failed [ 216.824967][ T8775] FAT-fs (loop1): Directory bread(block 2575) failed [ 216.853753][ T8775] FAT-fs (loop1): Directory bread(block 2576) failed [ 216.871817][ T8775] FAT-fs (loop1): Directory bread(block 2577) failed [ 216.887451][ T8775] FAT-fs (loop1): Directory bread(block 2578) failed [ 216.903223][ T8775] FAT-fs (loop1): Directory bread(block 2579) failed [ 216.917912][ T8775] FAT-fs (loop1): Directory bread(block 2580) failed 13:06:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}, {0x0, 0x0, 0x323}], 0x0, &(0x7f00000000c0)={[{@fat=@debug='debug'}, {@fat=@check_strict='check=strict'}]}) 13:06:06 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) shutdown(r0, 0x1) 13:06:06 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) 13:06:06 executing program 2: 13:06:06 executing program 2: 13:06:06 executing program 0: 13:06:06 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) shutdown(r0, 0x1) 13:06:06 executing program 2: [ 217.239528][ T8816] FAT-fs (loop1): Directory bread(block 2571) failed [ 217.277532][ T8816] FAT-fs (loop1): Directory bread(block 2572) failed [ 217.307080][ T8816] FAT-fs (loop1): Directory bread(block 2573) failed [ 217.337009][ T8816] FAT-fs (loop1): Directory bread(block 2574) failed [ 217.360235][ T8816] FAT-fs (loop1): Directory bread(block 2575) failed [ 217.373547][ T8816] FAT-fs (loop1): Directory bread(block 2576) failed [ 217.389029][ T8816] FAT-fs (loop1): Directory bread(block 2577) failed [ 217.402175][ T8816] FAT-fs (loop1): Directory bread(block 2578) failed [ 217.416689][ T8816] FAT-fs (loop1): Directory bread(block 2579) failed [ 217.434511][ T8816] FAT-fs (loop1): Directory bread(block 2580) failed 13:06:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000240)={0x0, 0xb203, &(0x7f0000000400)={&(0x7f0000000100)={0x6c, r2, 0xc573de0d27bdfe6f, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}]}]}, 0x6c}}, 0x0) 13:06:06 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)='\x00', 0xfffffffffffffffe, 0x4, 0x0, 0x0) shutdown(r0, 0x1) 13:06:06 executing program 1: syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000404090a0200027400f801", 0x17}, {0x0, 0x0, 0x323}], 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 13:06:06 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000440)=[{&(0x7f0000000100)="25bca274769e620a2734fa0095e0612687ecb86a548802a902000000000000004e2f98b579a782d270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)={[{@stripe={'stripe'}}]}) [ 217.618952][ T8827] tipc: Started in network mode 13:06:06 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7125e, 0x8139d39a0130d25a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window, @mss={0x2, 0xfffffffc}, @mss, @mss={0x2, 0x8}, @sack_perm, @timestamp, @timestamp], 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)='\x00', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010200f9000000000000000000000800014000000000980b21eaec5b9bfabece80ffb174c736c1313a4a2e80cefc1913d1b67ce1"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @dev}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x9, 0x80ffffffff}, 0x14) shutdown(r0, 0x1) [ 217.632938][ T8827] tipc: Own node identity ff030000000000000000000000000001, cluster identity 4711 [ 217.692584][ T8828] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 217.735677][ T8827] check_preemption_disabled: 3 callbacks suppressed [ 217.735743][ T8827] BUG: using smp_processor_id() in preemptible [00000000] code: syz-executor.2/8827 [ 217.814345][ T8827] caller is dst_cache_get+0x3a/0xb0 [ 217.857379][ T8832] FAT-fs (loop1): Directory bread(block 2571) failed [ 217.868136][ T8827] CPU: 0 PID: 8827 Comm: syz-executor.2 Not tainted 5.7.0-rc1-syzkaller #0 [ 217.868671][ T8827] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 217.869229][ T8827] Call Trace: [ 217.870395][ T8827] dump_stack+0x188/0x20d [ 217.870507][ T8827] debug_smp_processor_id.cold+0x88/0x9b [ 217.870518][ T8827] dst_cache_get+0x3a/0xb0 [ 217.870679][ T8827] ? lock_downgrade+0x840/0x840 [ 217.870840][ T8827] tipc_udp_xmit.isra.0+0xb9/0xad0 [ 217.870855][ T8827] ? tipc_udp_addr2str+0x160/0x160 [ 217.870865][ T8827] ? tipc_crypto_xmit+0xb3e/0x2c70 [ 217.870936][ T8827] ? rcu_read_lock_held+0x9c/0xb0 [ 217.870945][ T8827] ? rcu_read_lock_held_common+0x130/0x130 [ 217.870957][ T8827] tipc_udp_send_msg+0x3e6/0x490 [ 217.870974][ T8827] tipc_bearer_xmit_skb+0x1de/0x3f0 [ 217.870983][ T8827] ? tipc_bearer_mtu+0x4d0/0x4d0 [ 217.870994][ T8827] ? tipc_disc_create+0x705/0xa90 [ 217.871006][ T8827] tipc_enable_bearer+0xb2f/0xd60 [ 217.871018][ T8827] ? tipc_bearer_xmit_skb+0x3f0/0x3f0 [ 217.871099][ T8827] ? preempt_schedule_irq+0xee/0x150 [ 217.871154][ T8827] ? __tipc_nl_bearer_enable+0x2bf/0x390 [ 217.871163][ T8827] __tipc_nl_bearer_enable+0x2bf/0x390 [ 217.871172][ T8827] ? tipc_nl_bearer_disable+0x30/0x30 [ 217.871181][ T8827] ? mutex_trylock+0x2c0/0x2c0 [ 217.871195][ T8827] ? nla_memcpy+0xa0/0xa0 [ 217.871242][ T8827] ? genl_family_rcv_msg_attrs_parse+0x1bd/0x320 [ 217.871254][ T8827] tipc_nl_bearer_enable+0x1e/0x30 [ 217.871262][ T8827] genl_rcv_msg+0x627/0xdf0 [ 217.871277][ T8827] ? genl_family_rcv_msg_attrs_parse+0x320/0x320 [ 217.871296][ T8827] ? __dev_queue_xmit+0xbf2/0x30a0 [ 217.871314][ T8827] ? lock_release+0x800/0x800 [ 217.871324][ T8827] ? skb_splice_bits+0x1a0/0x1a0 [ 217.871651][ T8827] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 217.871939][ T8827] netlink_rcv_skb+0x15a/0x410 [ 217.871949][ T8827] ? genl_family_rcv_msg_attrs_parse+0x320/0x320 [ 217.871959][ T8827] ? netlink_ack+0xa10/0xa10 [ 217.871977][ T8827] genl_rcv+0x24/0x40 [ 217.871985][ T8827] netlink_unicast+0x537/0x740 [ 217.871997][ T8827] ? netlink_attachskb+0x810/0x810 [ 217.872007][ T8827] ? _copy_from_iter_full+0x25c/0x870 [ 217.872035][ T8827] ? __phys_addr_symbol+0x2c/0x70 [ 217.872099][ T8827] ? __check_object_size+0x171/0x437 [ 217.872110][ T8827] netlink_sendmsg+0x882/0xe10 [ 217.872190][ T8827] ? aa_af_perm+0x260/0x260 [ 217.872200][ T8827] ? netlink_unicast+0x740/0x740 [ 217.872219][ T8827] ? netlink_unicast+0x740/0x740 [ 217.872231][ T8827] sock_sendmsg+0xcf/0x120 [ 217.872241][ T8827] ____sys_sendmsg+0x6bf/0x7e0 [ 217.872251][ T8827] ? get_compat_msghdr+0xd1/0x120 [ 217.872259][ T8827] ? kernel_sendmsg+0x50/0x50 [ 217.872277][ T8827] ___sys_sendmsg+0x100/0x170 [ 217.872286][ T8827] ? sendmsg_copy_msghdr+0x70/0x70 [ 217.872438][ T8827] ? __fget_files+0x32f/0x500 [ 217.872478][ T8827] ? ksys_dup3+0x3c0/0x3c0 [ 217.872493][ T8827] ? __fget_light+0x20e/0x270 [ 217.872505][ T8827] __sys_sendmsg+0xec/0x1b0 [ 217.872514][ T8827] ? __sys_sendmsg_sock+0xb0/0xb0 [ 217.872524][ T8827] ? __ia32_sys_futex_time32+0x32a/0x494 [ 217.872564][ T8827] ? trace_hardirqs_off_caller+0x55/0x230 [ 217.872575][ T8827] ? do_fast_syscall_32+0xcc/0xe90 [ 217.872587][ T8827] do_fast_syscall_32+0x270/0xe90 [ 217.872601][ T8827] entry_SYSENTER_compat+0x70/0x7f [ 217.886633][ T8827] tipc: Enabled bearer , priority 10 [ 217.915454][ T8832] FAT-fs (loop1): Directory bread(block 2572) failed [ 218.718864][ T8832] FAT-fs (loop1): Directory bread(block 2573) failed [ 218.754631][ T8832] FAT-fs (loop1): Directory bread(block 2574) failed [ 218.772015][ T8832] FAT-fs (loop1): Directory bread(block 2575) failed [ 218.795556][ T5] tipc: 32-bit node address hash set to 10003ff [ 218.808006][ T8832] FAT-fs (loop1): Directory bread(block 2576) failed [ 218.837362][ T8832] FAT-fs (loop1): Directory bread(block 2577) failed [ 218.860467][ T8832] FAT-fs (loop1): Directory bread(block 2578) failed [ 218.884018][ T8832] FAT-fs (loop1): Directory bread(block 2579) failed [ 218.902900][ T8832] FAT-fs (loop1): Directory bread(block 2580) failed [ 219.560233][ T8704] syz-executor.1 (8704) used greatest stack depth: 23152 bytes left [ 220.904808][ T8728] tipc: TX() has been purged, node left! [ 224.610322][ T8728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.645697][ T8728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.684510][ T8728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.708390][ T8728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.743997][ T8728] device bridge_slave_1 left promiscuous mode [ 224.771574][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.872984][ T8728] device bridge_slave_0 left promiscuous mode [ 224.898146][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.974661][ T8728] device veth1_macvtap left promiscuous mode [ 225.008486][ T8728] device veth0_macvtap left promiscuous mode [ 225.034867][ T8728] device veth1_vlan left promiscuous mode [ 225.060391][ T8728] device veth0_vlan left promiscuous mode [ 226.428364][ T8728] device hsr_slave_0 left promiscuous mode [ 226.514356][ C1] hrtimer: interrupt took 41931132 ns [ 226.778253][ T8728] device hsr_slave_1 left promiscuous mode [ 227.069388][ T8728] team0 (unregistering): Port device team_slave_1 removed [ 227.108854][ T8728] team0 (unregistering): Port device team_slave_0 removed [ 227.141811][ T8728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.245228][ T8728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.474504][ T8728] bond0 (unregistering): Released all slaves