[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.58' (ECDSA) to the list of known hosts. 2021/02/13 22:16:56 fuzzer started 2021/02/13 22:16:56 dialing manager at 10.128.0.163:39273 2021/02/13 22:16:56 syscalls: 3540 2021/02/13 22:16:56 code coverage: enabled 2021/02/13 22:16:56 comparison tracing: enabled 2021/02/13 22:16:56 extra coverage: enabled 2021/02/13 22:16:56 setuid sandbox: enabled 2021/02/13 22:16:56 namespace sandbox: enabled 2021/02/13 22:16:56 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/13 22:16:56 fault injection: enabled 2021/02/13 22:16:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/13 22:16:56 net packet injection: enabled 2021/02/13 22:16:56 net device setup: enabled 2021/02/13 22:16:56 concurrency sanitizer: enabled 2021/02/13 22:16:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/13 22:16:56 USB emulation: enabled 2021/02/13 22:16:56 hci packet injection: enabled 2021/02/13 22:16:56 wifi device emulation: enabled 2021/02/13 22:16:56 802.15.4 emulation: enabled 2021/02/13 22:16:56 suppressing KCSAN reports in functions: '__xa_clear_mark' 'dd_has_work' 2021/02/13 22:16:56 fetching corpus: 0, signal 0/2000 (executing program) 2021/02/13 22:16:56 fetching corpus: 49, signal 23584/26475 (executing program) 2021/02/13 22:16:57 fetching corpus: 98, signal 37571/40821 (executing program) 2021/02/13 22:16:57 fetching corpus: 144, signal 48165/51504 (executing program) 2021/02/13 22:16:57 fetching corpus: 193, signal 55863/59044 (executing program) 2021/02/13 22:16:57 fetching corpus: 243, signal 63755/66396 (executing program) 2021/02/13 22:16:57 fetching corpus: 290, signal 68113/70423 (executing program) 2021/02/13 22:16:57 fetching corpus: 340, signal 72802/74550 (executing program) 2021/02/13 22:16:57 fetching corpus: 388, signal 78464/79369 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81088/81476 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81548 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81581 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81619 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81678 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81719 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81748 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81796 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81836 (executing program) 2021/02/13 22:16:57 fetching corpus: 416, signal 81113/81877 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81113/81901 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81113/81945 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81113/81977 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81113/82015 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81113/82049 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82079 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82124 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82154 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82190 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82229 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82261 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82299 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82338 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82375 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82409 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82454 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82491 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82535 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82576 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82614 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82652 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82689 (executing program) 2021/02/13 22:16:58 fetching corpus: 416, signal 81115/82689 (executing program) 2021/02/13 22:16:59 starting 6 fuzzer processes 22:16:59 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 22:17:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:00 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) 22:17:00 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:00 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:00 executing program 5: syz_emit_ethernet(0x2b, &(0x7f0000000080)={@random="59d10bcc7c59", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @broadcast}, {0x11, 0x0, 0x0, @local, "1d"}}}}}, 0x0) syzkaller login: [ 33.617672][ T8430] IPVS: ftp: loaded support on port[0] = 21 [ 33.710709][ T8430] chnl_net:caif_netlink_parms(): no params data found [ 33.738680][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.745775][ T8430] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.753298][ T8430] device bridge_slave_0 entered promiscuous mode [ 33.776036][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.789475][ T8430] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.797213][ T8430] device bridge_slave_1 entered promiscuous mode [ 33.813114][ T8430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.822495][ T8432] IPVS: ftp: loaded support on port[0] = 21 [ 33.824085][ T8430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.846291][ T8430] team0: Port device team_slave_0 added [ 33.854583][ T8430] team0: Port device team_slave_1 added [ 33.876939][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.886559][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.913029][ T8430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.932875][ T8430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.946046][ T8430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.974496][ T8430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.002638][ T8434] IPVS: ftp: loaded support on port[0] = 21 [ 34.016735][ T8430] device hsr_slave_0 entered promiscuous mode [ 34.023611][ T8430] device hsr_slave_1 entered promiscuous mode [ 34.109699][ T8432] chnl_net:caif_netlink_parms(): no params data found [ 34.155215][ T8434] chnl_net:caif_netlink_parms(): no params data found [ 34.182813][ T8436] IPVS: ftp: loaded support on port[0] = 21 [ 34.224140][ T8434] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.231260][ T8434] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.238797][ T8434] device bridge_slave_0 entered promiscuous mode [ 34.256665][ T8434] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.264464][ T8434] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.271942][ T8434] device bridge_slave_1 entered promiscuous mode [ 34.283109][ T8432] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.291279][ T8432] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.298846][ T8432] device bridge_slave_0 entered promiscuous mode [ 34.338584][ T8434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.352850][ T8432] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.359882][ T8432] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.367637][ T8432] device bridge_slave_1 entered promiscuous mode [ 34.398558][ T8430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.417515][ T8434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.448495][ T8432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.451304][ T8438] IPVS: ftp: loaded support on port[0] = 21 [ 34.471582][ T8432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.481242][ T8430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.502028][ T8430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.522748][ T8434] team0: Port device team_slave_0 added [ 34.532778][ T8432] team0: Port device team_slave_0 added [ 34.545850][ T8440] IPVS: ftp: loaded support on port[0] = 21 [ 34.554104][ T8434] team0: Port device team_slave_1 added [ 34.563269][ T8430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.572507][ T8432] team0: Port device team_slave_1 added [ 34.603477][ T8436] chnl_net:caif_netlink_parms(): no params data found [ 34.644535][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.653163][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.679499][ T8434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.692257][ T8434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.699327][ T8434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.725617][ T8434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.740703][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.747899][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.773962][ T8432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.803116][ T8432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.810258][ T8432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.837262][ T8432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.886854][ T8438] chnl_net:caif_netlink_parms(): no params data found [ 34.905055][ T8434] device hsr_slave_0 entered promiscuous mode [ 34.911537][ T8434] device hsr_slave_1 entered promiscuous mode [ 34.917992][ T8434] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.926313][ T8434] Cannot create hsr debugfs directory [ 34.932360][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 34.971389][ T8436] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.978513][ T8436] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.986469][ T8436] device bridge_slave_0 entered promiscuous mode [ 34.996914][ T8436] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.004415][ T8436] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.012230][ T8436] device bridge_slave_1 entered promiscuous mode [ 35.041413][ T8432] device hsr_slave_0 entered promiscuous mode [ 35.047992][ T8432] device hsr_slave_1 entered promiscuous mode [ 35.054584][ T8432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.062491][ T8432] Cannot create hsr debugfs directory [ 35.112299][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.119630][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.129079][ T8440] device bridge_slave_0 entered promiscuous mode [ 35.136888][ T8436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.147943][ T8438] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.159792][ T8438] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.167357][ T8438] device bridge_slave_0 entered promiscuous mode [ 35.176928][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.184567][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.192280][ T8440] device bridge_slave_1 entered promiscuous mode [ 35.205013][ T8436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.215743][ T8438] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.222993][ T8438] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.230527][ T8438] device bridge_slave_1 entered promiscuous mode [ 35.237264][ T8434] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.260060][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.280090][ T8434] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.289521][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.307379][ T8438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.325801][ T8434] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.334474][ T8436] team0: Port device team_slave_0 added [ 35.344616][ T8438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.364531][ T8438] team0: Port device team_slave_0 added [ 35.370716][ T8434] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.383460][ T8436] team0: Port device team_slave_1 added [ 35.391198][ T8440] team0: Port device team_slave_0 added [ 35.398035][ T8440] team0: Port device team_slave_1 added [ 35.409032][ T8438] team0: Port device team_slave_1 added [ 35.424630][ T8430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.452049][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.459112][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.486272][ T8436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.499331][ T8436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.506314][ T8436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.533181][ T8436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.545043][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.553339][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.580307][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.591676][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.598805][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.625789][ T8438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.638767][ T8438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.646409][ T8438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.672961][ T8438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.674348][ T3845] Bluetooth: hci0: command 0x0409 tx timeout [ 35.697049][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.704109][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.731074][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.754994][ T8438] device hsr_slave_0 entered promiscuous mode [ 35.761519][ T8438] device hsr_slave_1 entered promiscuous mode [ 35.767936][ T8438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.775583][ T8438] Cannot create hsr debugfs directory [ 35.783879][ T8436] device hsr_slave_0 entered promiscuous mode [ 35.794999][ T8436] device hsr_slave_1 entered promiscuous mode [ 35.801663][ T8436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.809330][ T8436] Cannot create hsr debugfs directory [ 35.828558][ T8440] device hsr_slave_0 entered promiscuous mode [ 35.834721][ T3845] Bluetooth: hci1: command 0x0409 tx timeout [ 35.841780][ T8440] device hsr_slave_1 entered promiscuous mode [ 35.848059][ T8440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.855688][ T8440] Cannot create hsr debugfs directory [ 35.862965][ T8432] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.875619][ T8432] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.902509][ T8432] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.914853][ T8432] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.924084][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.931904][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.940581][ T8430] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.981966][ T8434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.990316][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 36.011433][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.020773][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.029010][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.036071][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.043969][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.082150][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.094164][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.102624][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.109698][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.120590][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.132816][ T8434] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.140783][ T8440] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.151658][ T8440] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.158416][ T19] Bluetooth: hci3: command 0x0409 tx timeout [ 36.170920][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.180213][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.190811][ T4891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.212009][ T8438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.229613][ T8440] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.238381][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.247016][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.255770][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.264269][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.272696][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.279867][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.287637][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.295953][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.304373][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.313134][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.321620][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.328633][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.336874][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.345301][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.353694][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.362627][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.372595][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.381135][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.390081][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.398277][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.407203][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.415285][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.423452][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.432167][ T3845] Bluetooth: hci4: command 0x0409 tx timeout [ 36.442246][ T8438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.454915][ T8440] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.467983][ T8430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.477067][ T8436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.479316][ T19] Bluetooth: hci5: command 0x0409 tx timeout [ 36.492615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.502908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.511888][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.520635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.528948][ T8438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.541319][ T8438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.559734][ T8436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.568844][ T8436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.595852][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.604351][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.612988][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.620806][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.630718][ T8434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.648389][ T8436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.680408][ T8430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.694679][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.703329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.713869][ T8432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.732282][ T8434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.754970][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.763450][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.774454][ T8432] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.784794][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.793594][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.802497][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.811257][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.820581][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.827766][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.838681][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.855266][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.879527][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.888197][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.898797][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.906479][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.914320][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.923021][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.931510][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.938811][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.946941][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.956541][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.964584][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.974185][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.981986][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.991975][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.002237][ T8430] device veth0_vlan entered promiscuous mode [ 37.018695][ T8436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.032193][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.050054][ T8438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.061056][ T8430] device veth1_vlan entered promiscuous mode [ 37.070008][ T8436] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.081452][ T8434] device veth0_vlan entered promiscuous mode [ 37.087740][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.096519][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.106171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.114749][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.123774][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.132181][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.140700][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.148279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.157254][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.165809][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.174792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.182896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.190887][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.220320][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.227894][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.236027][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.244907][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.253603][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.260776][ T9387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.268562][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.277486][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.285996][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.293040][ T9387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.301296][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.310301][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.318872][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.327642][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.334714][ T9387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.342895][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.351714][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.360257][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.367303][ T9387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.375254][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.384614][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.393468][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.402001][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.410666][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.418600][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.441800][ T8430] device veth0_macvtap entered promiscuous mode [ 37.451751][ T8440] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.463954][ T8440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.476866][ T8432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.485989][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.495074][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.505449][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.514563][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.524633][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.533541][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.543066][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.551873][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.562625][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.571190][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.579861][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.587892][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.596909][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.607115][ T8438] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.618378][ T8430] device veth1_macvtap entered promiscuous mode [ 37.625674][ T8434] device veth1_vlan entered promiscuous mode [ 37.640764][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.648626][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.657315][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.665374][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.674037][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.682492][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.690725][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.699622][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.708041][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.717089][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.731318][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.741402][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.750196][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.757285][ T9387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.766253][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.775002][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.783610][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.790743][ T9387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.807732][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.814905][ T3845] Bluetooth: hci0: command 0x041b tx timeout [ 37.830307][ T8436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.842379][ T8436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.855096][ T8432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.862732][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.871069][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.880343][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.888560][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.897099][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.905242][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.913523][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.921697][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.929571][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.938162][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.947091][ T3845] Bluetooth: hci1: command 0x041b tx timeout [ 37.955936][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.966463][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.978864][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.989412][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.997471][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.012803][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.029665][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.037033][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.047016][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.055668][ T9387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.069688][ T8430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.078190][ T8434] device veth0_macvtap entered promiscuous mode [ 38.085608][ T19] Bluetooth: hci2: command 0x041b tx timeout [ 38.094601][ T8438] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.108128][ T8438] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.122071][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.130201][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.138426][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.147040][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.155727][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.164649][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.173118][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.181674][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.190128][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.198273][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.207090][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.215959][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.224248][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.234135][ T8430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.239029][ T3845] Bluetooth: hci3: command 0x041b tx timeout [ 38.248160][ T8430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.257890][ T8430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.266654][ T8430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.279588][ T8434] device veth1_macvtap entered promiscuous mode [ 38.348648][ T8438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.355869][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.364508][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.373371][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.382365][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.390117][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.405455][ T8432] device veth0_vlan entered promiscuous mode [ 38.421721][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.430092][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.438916][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.447385][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.458573][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.466147][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.478659][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.479073][ T8168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.489495][ T3845] Bluetooth: hci4: command 0x041b tx timeout [ 38.508090][ T8168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.508970][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.526647][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.536953][ T8434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 38.547611][ T8434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.557856][ T19] Bluetooth: hci5: command 0x041b tx timeout [ 38.564981][ T8434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.576172][ T8432] device veth1_vlan entered promiscuous mode [ 38.590610][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.598418][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.610469][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.618841][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.627644][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.636765][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.651558][ T8434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.662242][ T8434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.672246][ T8434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.681428][ T8434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.701654][ T303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.715547][ T303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.724276][ T8436] device veth0_vlan entered promiscuous mode [ 38.743466][ T8440] device veth0_vlan entered promiscuous mode [ 38.754986][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.764761][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.778030][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.787048][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.796200][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.804484][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.813268][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.821539][ T9726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.831258][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.839355][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.847069][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.855096][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.885614][ T8440] device veth1_vlan entered promiscuous mode [ 38.911520][ T8436] device veth1_vlan entered promiscuous mode [ 38.923765][ T8432] device veth0_macvtap entered promiscuous mode [ 38.933226][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.943335][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.952096][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.961196][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.974709][ T8438] device veth0_vlan entered promiscuous mode [ 38.989327][ T303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.997512][ T9782] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.008149][ T303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.010733][ T8432] device veth1_macvtap entered promiscuous mode [ 39.034286][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.042925][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.053642][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.061937][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.070170][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.078723][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.101569][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.105536][ T8438] device veth1_vlan entered promiscuous mode [ 39.117426][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.118218][ T9793] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.133720][ T9793] bridge0: port 3(team0) entered blocking state [ 39.140470][ T9793] bridge0: port 3(team0) entered disabled state [ 39.147444][ T9793] device team0 entered promiscuous mode [ 39.153469][ T9793] device team_slave_0 entered promiscuous mode [ 39.159986][ T9793] device team_slave_1 entered promiscuous mode [ 39.166398][ T9793] bridge0: port 3(team0) entered blocking state [ 39.172718][ T9793] bridge0: port 3(team0) entered forwarding state [ 39.182648][ T9782] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.191198][ T9782] device team0 left promiscuous mode [ 39.196582][ T9782] device team_slave_0 left promiscuous mode [ 39.203317][ T9782] device team_slave_1 left promiscuous mode [ 39.210071][ T9782] bridge0: port 3(team0) entered disabled state [ 39.223974][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.231969][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.241132][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.249939][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.258616][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.268690][ T8440] device veth0_macvtap entered promiscuous mode [ 39.278109][ T8440] device veth1_macvtap entered promiscuous mode [ 39.288876][ T9793] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.300794][ T9793] bridge0: port 3(team0) entered blocking state [ 39.308868][ T9793] bridge0: port 3(team0) entered disabled state [ 39.315474][ T9793] device team0 entered promiscuous mode [ 39.321351][ T9793] device team_slave_0 entered promiscuous mode [ 39.327533][ T9793] device team_slave_1 entered promiscuous mode [ 39.334865][ T9793] bridge0: port 3(team0) entered blocking state [ 39.341145][ T9793] bridge0: port 3(team0) entered forwarding state 22:17:06 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 39.352672][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.363350][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.380287][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.389270][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.403418][ T8436] device veth0_macvtap entered promiscuous mode [ 39.423603][ T9803] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.436437][ T9803] device team0 left promiscuous mode [ 39.442919][ T9803] device team_slave_0 left promiscuous mode [ 39.448917][ T9803] device team_slave_1 left promiscuous mode [ 39.454924][ T9803] bridge0: port 3(team0) entered disabled state [ 39.468411][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.479042][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.489953][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.502423][ T9807] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 39.510919][ T9807] BPF: [ 39.513142][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.513702][ T9807] BPF:Invalid member name_offset:6 [ 39.529483][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.532053][ T9807] BPF: [ 39.532053][ T9807] [ 39.545780][ T8436] device veth1_macvtap entered promiscuous mode 22:17:06 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 39.557326][ T8438] device veth0_macvtap entered promiscuous mode [ 39.567375][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.580662][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.591412][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.603620][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.614893][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.627126][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.640276][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.648418][ T9806] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.657759][ T9806] bridge0: port 3(team0) entered blocking state [ 39.666440][ T9806] bridge0: port 3(team0) entered disabled state [ 39.673579][ T9806] device team0 entered promiscuous mode [ 39.679271][ T9806] device team_slave_0 entered promiscuous mode [ 39.685546][ T9806] device team_slave_1 entered promiscuous mode [ 39.691949][ T9806] bridge0: port 3(team0) entered blocking state [ 39.698324][ T9806] bridge0: port 3(team0) entered forwarding state 22:17:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 39.705445][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.716276][ T9814] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 39.724528][ T9814] BPF: [ 39.726496][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.736698][ T9814] BPF:Invalid member name_offset:6 [ 39.742635][ T9814] BPF: [ 39.742635][ T9814] [ 39.758769][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.767406][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.778658][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.786963][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.798005][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.807139][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.818504][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.830579][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.841320][ T8432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.851872][ T8432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.862720][ T8432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.873015][ T8438] device veth1_macvtap entered promiscuous mode [ 39.882838][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.894844][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.904941][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.916143][ T19] Bluetooth: hci0: command 0x040f tx timeout [ 39.916151][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.916160][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.943148][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 22:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 39.954538][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.962261][ T9817] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 39.978080][ T9817] device team0 left promiscuous mode [ 39.983408][ T9817] device team_slave_0 left promiscuous mode [ 39.998164][ T19] Bluetooth: hci1: command 0x040f tx timeout [ 40.008280][ T9817] device team_slave_1 left promiscuous mode [ 40.014279][ T9817] bridge0: port 3(team0) entered disabled state [ 40.022994][ T9820] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 40.031951][ T9820] bridge0: port 3(team0) entered blocking state [ 40.041240][ T9823] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 40.048087][ T9820] bridge0: port 3(team0) entered disabled state [ 40.056346][ T9820] device team0 entered promiscuous mode [ 40.062460][ T9823] BPF: [ 40.064557][ T9820] device team_slave_0 entered promiscuous mode [ 40.065223][ T9823] BPF:Invalid member name_offset:6 [ 40.076615][ T9820] device team_slave_1 entered promiscuous mode [ 40.079601][ T9823] BPF: [ 40.079601][ T9823] [ 40.084009][ T9820] bridge0: port 3(team0) entered blocking state [ 40.094103][ T9820] bridge0: port 3(team0) entered forwarding state [ 40.101366][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 22:17:07 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) [ 40.109862][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.117769][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.129331][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.138646][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.147438][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.162280][ T3845] Bluetooth: hci2: command 0x040f tx timeout [ 40.170259][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.184999][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.194911][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.205806][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.217310][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.228310][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.238700][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.249251][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.260125][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.268958][ T8432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.277726][ T8432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.286742][ T8432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.295598][ T8432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.315526][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.326973][ T9732] Bluetooth: hci3: command 0x040f tx timeout [ 40.332046][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.343970][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.355637][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.366365][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.378180][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.388532][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.399264][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.409341][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.420203][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.431449][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.442837][ T8440] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.452168][ T8440] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 22:17:07 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 40.461373][ T8440] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.470326][ T8440] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.482932][ T9828] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 40.492730][ T9828] device team0 left promiscuous mode [ 40.498392][ T9828] device team_slave_0 left promiscuous mode [ 40.504412][ T9828] device team_slave_1 left promiscuous mode [ 40.512736][ T9828] bridge0: port 3(team0) entered disabled state [ 40.519832][ T9831] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 40.534046][ T9831] bridge0: port 3(team0) entered blocking state [ 40.540708][ T9831] bridge0: port 3(team0) entered disabled state [ 40.547792][ T9831] device team0 entered promiscuous mode [ 40.555407][ T9732] Bluetooth: hci4: command 0x040f tx timeout [ 40.562195][ T9831] device team_slave_0 entered promiscuous mode [ 40.570795][ T9831] device team_slave_1 entered promiscuous mode [ 40.577228][ T9831] bridge0: port 3(team0) entered blocking state [ 40.583580][ T9831] bridge0: port 3(team0) entered forwarding state [ 40.590936][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.601460][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 22:17:08 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) [ 40.610384][ T9836] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 40.612112][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.621958][ T9836] BPF: [ 40.632976][ T9732] Bluetooth: hci5: command 0x040f tx timeout [ 40.639892][ T9836] BPF:Invalid member name_offset:6 [ 40.643951][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.645202][ T9836] BPF: [ 40.645202][ T9836] [ 40.670148][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.682251][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.692308][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.704642][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.716029][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.726993][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.737196][ T8436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.748134][ T8436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.759515][ T8436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.767565][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.778213][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.791176][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.801672][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.812578][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.823036][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.834167][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.845871][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.857189][ T8438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.870670][ T8438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.884595][ T8438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.900395][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.909326][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.917932][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.926514][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.951116][ T9841] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 40.960723][ T8436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.961766][ T9841] BPF: [ 40.976635][ T8436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.982572][ T9841] BPF:Invalid member name_offset:6 [ 40.991099][ T9841] BPF: [ 40.991099][ T9841] [ 41.012352][ T8436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.028354][ T8436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.044968][ T8438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.054120][ T8438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.072533][ T8438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.081740][ T8438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.207651][ T3073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.215514][ T3073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.226976][ T8168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.232438][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.249118][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.249379][ T8168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.264347][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.274398][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.295649][ T8168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.311372][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.326025][ T8168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.342964][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.355904][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.367119][ T3073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.370088][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.384964][ T3073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.393408][ T9732] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.426478][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.436973][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.439424][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.449826][ T9742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.470160][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.474710][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.487476][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 22:17:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 22:17:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) 22:17:09 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 5: syz_emit_ethernet(0x2b, &(0x7f0000000080)={@random="59d10bcc7c59", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @broadcast}, {0x11, 0x0, 0x0, @local, "1d"}}}}}, 0x0) 22:17:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) [ 41.675727][ T9940] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 41.679683][ T9941] bridge0: port 3(team0) entered blocking state [ 41.703833][ T9940] BPF: 22:17:09 executing program 5: syz_emit_ethernet(0x2b, &(0x7f0000000080)={@random="59d10bcc7c59", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @broadcast}, {0x11, 0x0, 0x0, @local, "1d"}}}}}, 0x0) 22:17:09 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 41.720564][ T9941] bridge0: port 3(team0) entered disabled state [ 41.741647][ T9940] BPF:Invalid member name_offset:6 [ 41.748581][ T9941] device team0 entered promiscuous mode 22:17:09 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x6}]}]}}, &(0x7f0000000200)=""/210, 0x32, 0xd2, 0x8}, 0x20) 22:17:09 executing program 5: syz_emit_ethernet(0x2b, &(0x7f0000000080)={@random="59d10bcc7c59", @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @broadcast}, {0x11, 0x0, 0x0, @local, "1d"}}}}}, 0x0) [ 41.774634][ T9941] device team_slave_0 entered promiscuous mode [ 41.775526][ T9940] BPF: [ 41.775526][ T9940] [ 41.802700][ T9941] device team_slave_1 entered promiscuous mode 22:17:09 executing program 3: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') [ 41.824718][ T9941] bridge0: port 3(team0) entered blocking state [ 41.831021][ T9941] bridge0: port 3(team0) entered forwarding state [ 41.890962][ T9956] BPF: (invalid-name-offset) type_id=0 bitfield_size=0 bits_offset=0 [ 41.913185][ T9956] BPF: [ 41.928503][ T9956] BPF:Invalid member name_offset:6 22:17:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 22:17:09 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:09 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 41.967802][ T9956] BPF: [ 41.967802][ T9956] 22:17:09 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 41.997790][ T3845] Bluetooth: hci0: command 0x0419 tx timeout 22:17:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.048796][ T9977] device team0 left promiscuous mode [ 42.057433][ C0] hrtimer: interrupt took 29740 ns [ 42.060798][ T9977] device team_slave_0 left promiscuous mode [ 42.071829][ T9732] Bluetooth: hci1: command 0x0419 tx timeout 22:17:09 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.093765][ T9977] device team_slave_1 left promiscuous mode [ 42.112004][ T9977] bridge0: port 3(team0) entered disabled state [ 42.137620][ T9979] bridge0: port 3(team0) entered blocking state 22:17:09 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.146419][ T9979] bridge0: port 3(team0) entered disabled state [ 42.165869][ T9979] device team0 entered promiscuous mode 22:17:09 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.211748][ T9979] device team_slave_0 entered promiscuous mode [ 42.228396][ T19] Bluetooth: hci2: command 0x0419 tx timeout [ 42.243228][ T9979] device team_slave_1 entered promiscuous mode [ 42.250785][ T9979] bridge0: port 3(team0) entered blocking state 22:17:09 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="2e00000010008188040f80ec59acbc0413a1f84810000000e3bd6efb440e09000e000a000200000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 22:17:09 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.257212][ T9979] bridge0: port 3(team0) entered forwarding state 22:17:09 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:09 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) 22:17:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') [ 42.358132][ T9999] device team0 left promiscuous mode [ 42.364040][ T9999] device team_slave_0 left promiscuous mode [ 42.372498][ T9999] device team_slave_1 left promiscuous mode [ 42.379511][ T9999] bridge0: port 3(team0) entered disabled state [ 42.400848][ T19] Bluetooth: hci3: command 0x0419 tx timeout 22:17:09 executing program 4: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.442337][T10001] bridge0: port 3(team0) entered blocking state [ 42.463699][T10001] bridge0: port 3(team0) entered disabled state 22:17:09 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') [ 42.512885][T10001] device team0 entered promiscuous mode 22:17:09 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:09 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:09 executing program 1: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000140)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@my=0x0}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x20011, r1, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000100)={{@host}}) [ 42.555227][T10001] device team_slave_0 entered promiscuous mode [ 42.587753][T10001] device team_slave_1 entered promiscuous mode [ 42.607624][T10001] bridge0: port 3(team0) entered blocking state [ 42.613940][T10001] bridge0: port 3(team0) entered forwarding state [ 42.629544][ T3845] Bluetooth: hci4: command 0x0419 tx timeout 22:17:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:10 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) [ 42.709574][ T9732] Bluetooth: hci5: command 0x0419 tx timeout 22:17:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:10 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 1: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:10 executing program 2: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000580)=0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)) 22:17:10 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 22:17:10 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x400c0c0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) sendto$inet(r1, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000002c0)={0x2, 0x7, 0x200}, 0xc) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x0, @private}, {0x2, 0x0, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)='veth1_to_bond\x00', 0x7, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close(r2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x3, 0xe76, 0xfffffffffffffffa, 0xffffffffffffffe0}) syz_open_procfs(0x0, &(0x7f0000000080)='net/udp\x00') 22:17:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0) [ 43.208902][T10063] loop1: detected capacity change from 264192 to 0 [ 43.225734][T10063] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 22:17:10 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 43.246289][ T35] audit: type=1800 audit(1613254630.645:2): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=3 res=0 errno=0 [ 43.323213][ T35] audit: type=1804 audit(1613254630.685:3): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 22:17:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0) [ 43.350956][ T35] audit: type=1804 audit(1613254630.685:4): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 [ 43.376729][ T35] audit: type=1804 audit(1613254630.685:5): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 22:17:10 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:10 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:10 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 43.402382][ T35] audit: type=1804 audit(1613254630.685:6): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 [ 43.435153][ T35] audit: type=1804 audit(1613254630.685:7): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 22:17:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0) 22:17:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000040)=@ipv6_newrule={0x30, 0x1e, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x4, 0x3, 'veth1\x00'}]}, 0x30}}, 0x0) 22:17:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) [ 43.729589][ T35] audit: type=1800 audit(1613254631.135:8): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=3 res=0 errno=0 22:17:11 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:11 executing program 5: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 22:17:11 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffe}]}) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xc3, &(0x7f0000000440)="c4c691019919da078a0098d1e0a593b040f7629100007f0000000022addee07bee0d6333b5cacd893169b618322ff6602022511253508b5a4496728c2a46e1bc340e29b9ab9b7136283e350808ffdb2dc4a741357baa16dacdcfac32957dc8bb44e203c4b1bc83d8c0b29f75bcf2e3482945fef116371f8c8c0c4db583a208718e3cccd9dd3bf7a0b9daf36c29d2d3e73af34a91a4a8844ee497e66452419a30843900bb4ff9a7df5ee0fdbb6e3a288594f90399513f49d5135aea040080005999dd60"}}], 0x1c) wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}, {&(0x7f0000000000)="0832f497d38350418e4bb321019511dc5df26e9a0b7ecb6974f527cc14538d1efb1ffe03284f6d33265be9c604b293f20e96beeb2aa4c457ac37a3a3f1ce8682500fcecd80", 0x45}], 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = getpid() tkill(r1, 0x2f) 22:17:11 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:11 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:11 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 43.789266][ T35] audit: type=1804 audit(1613254631.135:9): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 [ 43.872689][ T24] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:11 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:11 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 43.909778][ T35] audit: type=1804 audit(1613254631.135:10): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 [ 43.973172][ T35] audit: type=1804 audit(1613254631.135:11): pid=10063 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir367180948/syzkaller.2bgCJI/10/file0/file0" dev="loop1" ino=3 res=1 errno=0 [ 44.004756][T10139] loop0: detected capacity change from 264192 to 0 [ 44.016171][T10139] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 44.024275][T10134] loop5: detected capacity change from 264192 to 0 [ 44.043707][T10143] loop1: detected capacity change from 264192 to 0 [ 44.056704][T10134] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:11 executing program 3: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) [ 44.091811][T10143] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:11 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:11 executing program 4: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:11 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 44.577485][T10173] loop3: detected capacity change from 264192 to 0 [ 44.623612][ T24] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 44.634445][T10173] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:12 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:12 executing program 2: r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x0) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000040)={0x305, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x80045301, &(0x7f00000002c0)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'}) 22:17:12 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:12 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:12 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 45.090513][T10186] loop0: detected capacity change from 264192 to 0 [ 45.104328][T10191] loop5: detected capacity change from 264192 to 0 [ 45.121498][T10188] loop4: detected capacity change from 264192 to 0 [ 45.130607][T10191] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 45.139846][T10186] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 45.154757][T10202] loop1: detected capacity change from 264192 to 0 [ 45.191681][T10188] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 45.214084][T10202] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:12 executing program 3: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:12 executing program 2: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 45.283675][ T58] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 45.446789][T10216] loop2: detected capacity change from 264192 to 0 [ 45.462648][T10216] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 45.545529][T10220] loop3: detected capacity change from 264192 to 0 [ 45.578752][T10220] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:13 executing program 0: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:13 executing program 5: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:13 executing program 4: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 45.958721][ T24] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) 22:17:13 executing program 2: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) 22:17:13 executing program 1: syz_mount_image$vfat(&(0x7f00000002c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="601c6d6b646f736617e43c00088020000200000004f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x200000000011000}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = open(&(0x7f0000000080)='./file0\x00', 0x4142, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x0) renameat2(r0, &(0x7f0000000140)='./file0\x00', r1, &(0x7f0000000180)='./file0\x00', 0x5) socket$inet_udplite(0x2, 0x2, 0x88) setreuid(0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x82) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x8280, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x101242, 0x0) write$binfmt_elf64(r5, &(0x7f0000000180)=ANY=[], 0x82) sendfile(r5, r4, 0x0, 0xa198) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendfile(r3, r2, 0x0, 0xa198) [ 46.049992][ T24] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 46.141185][T10232] loop5: detected capacity change from 264192 to 0 [ 46.152383][T10233] loop4: detected capacity change from 264192 to 0 [ 46.218557][T10232] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 46.235520][T10234] loop0: detected capacity change from 264192 to 0 [ 46.245422][T10233] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 46.272662][T10234] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 46.294388][T10220] ================================================================== [ 46.300165][T10247] loop2: detected capacity change from 264192 to 0 [ 46.302596][T10220] BUG: KCSAN: data-race in find_get_pages_range_tag / xas_clear_mark [ 46.302631][T10220] [ 46.319519][T10220] write to 0xffff88810dbf8d78 of 8 bytes by task 10224 on cpu 0: [ 46.327232][T10220] xas_clear_mark+0xa1/0x180 [ 46.331854][T10220] __test_set_page_writeback+0x3db/0x4d0 [ 46.337680][T10220] ext4_bio_write_page+0xfe/0xe90 [ 46.342717][T10220] mpage_process_page_bufs+0x4db/0x5f0 [ 46.348181][T10220] mpage_prepare_extent_to_map+0x4e6/0x640 [ 46.353989][T10220] ext4_writepages+0x674/0x1e70 [ 46.358848][T10220] do_writepages+0x7b/0x150 [ 46.363356][T10220] __filemap_fdatawrite_range+0x19d/0x1d0 [ 46.369946][T10220] file_write_and_wait_range+0x9f/0x120 [ 46.375491][T10220] ext4_sync_file+0x105/0x6e0 [ 46.380177][T10220] vfs_fsync_range+0x107/0x120 [ 46.384965][T10220] ext4_buffered_write_iter+0x38f/0x3e0 [ 46.391473][T10220] ext4_file_write_iter+0x47a/0x1060 [ 46.396767][T10220] do_iter_readv_writev+0x2cb/0x360 [ 46.401966][T10220] do_iter_write+0x112/0x4c0 [ 46.406552][T10220] vfs_iter_write+0x4c/0x70 [ 46.411050][T10220] iter_file_splice_write+0x41a/0x770 [ 46.416431][T10220] direct_splice_actor+0x80/0xa0 [ 46.421367][T10220] splice_direct_to_actor+0x345/0x650 [ 46.426760][T10220] do_splice_direct+0xf5/0x170 [ 46.431520][T10220] do_sendfile+0x5e0/0xcf0 [ 46.435945][T10220] __x64_sys_sendfile64+0xf2/0x130 [ 46.441173][T10220] do_syscall_64+0x39/0x80 [ 46.445603][T10220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.451622][T10220] [ 46.455179][T10220] read to 0xffff88810dbf8d78 of 8 bytes by task 10220 on cpu 1: [ 46.462805][T10220] find_get_pages_range_tag+0x35c/0x600 [ 46.468366][T10220] pagevec_lookup_range_tag+0x37/0x50 [ 46.473746][T10220] mpage_prepare_extent_to_map+0x195/0x640 [ 46.479566][T10220] ext4_writepages+0x674/0x1e70 [ 46.484535][T10220] do_writepages+0x7b/0x150 [ 46.489065][T10220] __filemap_fdatawrite_range+0x19d/0x1d0 [ 46.494785][T10220] file_write_and_wait_range+0x9f/0x120 [ 46.500333][T10220] ext4_sync_file+0x105/0x6e0 [ 46.505021][T10220] vfs_fsync_range+0x107/0x120 [ 46.509790][T10220] ext4_buffered_write_iter+0x38f/0x3e0 [ 46.515341][T10220] ext4_file_write_iter+0x47a/0x1060 [ 46.520641][T10220] do_iter_readv_writev+0x2cb/0x360 [ 46.525844][T10220] do_iter_write+0x112/0x4c0 [ 46.530430][T10220] vfs_iter_write+0x4c/0x70 [ 46.534931][T10220] iter_file_splice_write+0x41a/0x770 [ 46.540838][T10220] direct_splice_actor+0x80/0xa0 [ 46.545781][T10220] splice_direct_to_actor+0x345/0x650 [ 46.551158][T10220] do_splice_direct+0xf5/0x170 [ 46.555925][T10220] do_sendfile+0x5e0/0xcf0 [ 46.560343][T10220] __x64_sys_sendfile64+0xf2/0x130 [ 46.565460][T10220] do_syscall_64+0x39/0x80 [ 46.569885][T10220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.575810][T10220] [ 46.578124][T10220] Reported by Kernel Concurrency Sanitizer on: [ 46.584259][T10220] CPU: 1 PID: 10220 Comm: syz-executor.3 Not tainted 5.11.0-rc7-syzkaller #0 [ 46.593039][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.603102][T10220] ================================================================== [ 46.611150][T10220] Kernel panic - not syncing: panic_on_warn set ... [ 46.617732][T10220] CPU: 1 PID: 10220 Comm: syz-executor.3 Not tainted 5.11.0-rc7-syzkaller #0 [ 46.626502][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 46.636554][T10220] Call Trace: [ 46.639830][T10220] dump_stack+0x116/0x15d [ 46.644160][T10220] panic+0x1e7/0x5fa [ 46.648052][T10220] ? vprintk_emit+0x2e2/0x360 [ 46.652727][T10220] kcsan_report+0x67b/0x680 [ 46.657228][T10220] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 46.662769][T10220] ? find_get_pages_range_tag+0x35c/0x600 [ 46.668486][T10220] ? pagevec_lookup_range_tag+0x37/0x50 [ 46.674031][T10220] ? mpage_prepare_extent_to_map+0x195/0x640 [ 46.680007][T10220] ? ext4_writepages+0x674/0x1e70 [ 46.685044][T10220] ? do_writepages+0x7b/0x150 [ 46.689721][T10220] ? __filemap_fdatawrite_range+0x19d/0x1d0 [ 46.695607][T10220] ? file_write_and_wait_range+0x9f/0x120 [ 46.701319][T10220] ? ext4_sync_file+0x105/0x6e0 [ 46.706167][T10220] ? vfs_fsync_range+0x107/0x120 [ 46.711105][T10220] ? ext4_buffered_write_iter+0x38f/0x3e0 [ 46.716826][T10220] ? ext4_file_write_iter+0x47a/0x1060 [ 46.722301][T10220] ? do_iter_readv_writev+0x2cb/0x360 [ 46.727669][T10220] ? do_iter_write+0x112/0x4c0 [ 46.732510][T10220] ? vfs_iter_write+0x4c/0x70 [ 46.737176][T10220] ? iter_file_splice_write+0x41a/0x770 [ 46.742716][T10220] ? direct_splice_actor+0x80/0xa0 [ 46.747824][T10220] ? splice_direct_to_actor+0x345/0x650 [ 46.753369][T10220] ? do_splice_direct+0xf5/0x170 [ 46.758304][T10220] ? do_sendfile+0x5e0/0xcf0 [ 46.762886][T10220] ? __x64_sys_sendfile64+0xf2/0x130 [ 46.768167][T10220] ? do_syscall_64+0x39/0x80 [ 46.772755][T10220] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.778840][T10220] ? blk_mq_do_dispatch_sched+0x5ea/0x610 [ 46.784571][T10220] kcsan_setup_watchpoint+0x472/0x4d0 [ 46.789948][T10220] find_get_pages_range_tag+0x35c/0x600 [ 46.795493][T10220] pagevec_lookup_range_tag+0x37/0x50 [ 46.800873][T10220] mpage_prepare_extent_to_map+0x195/0x640 [ 46.806678][T10220] ? xas_find_marked+0x5f0/0x6b0 [ 46.811620][T10220] ? ext4_init_io_end+0x2d/0xa0 [ 46.816490][T10220] ? kmem_cache_alloc+0x18e/0x2e0 [ 46.821507][T10220] ? ext4_init_io_end+0x2d/0xa0 [ 46.826357][T10220] ext4_writepages+0x674/0x1e70 [ 46.831216][T10220] ? kvm_sched_clock_read+0x15/0x40 [ 46.836409][T10220] ? sched_clock_cpu+0x11/0x1a0 [ 46.841276][T10220] ? start_this_handle+0xf5a/0x1010 [ 46.846478][T10220] ? ___cache_free+0x3c/0x2f0 [ 46.851160][T10220] ? jbd2_journal_stop+0x5cb/0x6d0 [ 46.856309][T10220] ? jbd2_journal_stop+0x5cb/0x6d0 [ 46.861419][T10220] ? ext4_readpage+0x180/0x180 [ 46.866188][T10220] do_writepages+0x7b/0x150 [ 46.870703][T10220] ? _raw_spin_unlock+0x22/0x40 [ 46.875548][T10220] __filemap_fdatawrite_range+0x19d/0x1d0 [ 46.881268][T10220] file_write_and_wait_range+0x9f/0x120 [ 46.886810][T10220] ext4_sync_file+0x105/0x6e0 [ 46.891500][T10220] ? tsan.module_ctor+0x10/0x10 [ 46.896345][T10220] vfs_fsync_range+0x107/0x120 [ 46.901108][T10220] ext4_buffered_write_iter+0x38f/0x3e0 [ 46.906669][T10220] ext4_file_write_iter+0x47a/0x1060 [ 46.911958][T10220] ? generic_file_buffered_read+0x981/0x9c0 [ 46.917862][T10220] do_iter_readv_writev+0x2cb/0x360 [ 46.923056][T10220] do_iter_write+0x112/0x4c0 [ 46.927656][T10220] ? kmalloc_array+0x2d/0x40 [ 46.932252][T10220] vfs_iter_write+0x4c/0x70 [ 46.936749][T10220] iter_file_splice_write+0x41a/0x770 [ 46.942127][T10220] ? splice_from_pipe+0xc0/0xc0 [ 46.946975][T10220] direct_splice_actor+0x80/0xa0 [ 46.951913][T10220] splice_direct_to_actor+0x345/0x650 [ 46.958345][T10220] ? do_splice_direct+0x170/0x170 [ 46.963391][T10220] do_splice_direct+0xf5/0x170 [ 46.968152][T10220] do_sendfile+0x5e0/0xcf0 [ 46.973433][T10220] __x64_sys_sendfile64+0xf2/0x130 [ 46.978550][T10220] do_syscall_64+0x39/0x80 [ 46.982964][T10220] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.988854][T10220] RIP: 0033:0x465d99 [ 46.992749][T10220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 47.012613][T10220] RSP: 002b:00007ff940daa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 47.021042][T10220] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 47.030656][T10220] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000c [ 47.038635][T10220] RBP: 00000000004bcf27 R08: 0000000000000000 R09: 0000000000000000 [ 47.046604][T10220] R10: 000000000000a198 R11: 0000000000000246 R12: 000000000056bf60 [ 47.055308][T10220] R13: 00007ffe6e49f16f R14: 00007ff940daa300 R15: 0000000000022000 [ 47.063881][T10220] Kernel Offset: disabled [ 47.069076][T10220] Rebooting in 86400 seconds..