Warning: Permanently added '10.128.0.195' (ECDSA) to the list of known hosts. 2020/08/02 10:09:12 fuzzer started 2020/08/02 10:09:12 dialing manager at 10.128.0.105:36325 2020/08/02 10:09:12 syscalls: 3254 2020/08/02 10:09:12 code coverage: enabled 2020/08/02 10:09:12 comparison tracing: enabled 2020/08/02 10:09:12 extra coverage: enabled 2020/08/02 10:09:12 setuid sandbox: enabled 2020/08/02 10:09:12 namespace sandbox: enabled 2020/08/02 10:09:12 Android sandbox: /sys/fs/selinux/policy does not exist 2020/08/02 10:09:12 fault injection: enabled 2020/08/02 10:09:12 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/08/02 10:09:12 net packet injection: enabled 2020/08/02 10:09:12 net device setup: enabled 2020/08/02 10:09:12 concurrency sanitizer: enabled 2020/08/02 10:09:12 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/08/02 10:09:12 USB emulation: enabled 2020/08/02 10:09:12 hci packet injection: enabled 2020/08/02 10:09:15 suppressing KCSAN reports in functions: '__mod_timer' 'page_counter_charge' '__add_to_page_cache_locked' 'find_get_pages_range_tag' 'complete_signal' 'kcm_rfree' 'dd_has_work' 'step_into' 'alloc_pid' 'do_nanosleep' 'xas_clear_mark' 'ext4_set_iomap' '__delayacct_blkio_end' 'exit_mm' 'futex_wait_queue_me' 'ext4_mb_good_group' '__delete_from_page_cache' '__xa_clear_mark' 'do_epoll_wait' 'blk_mq_request_bypass_insert' 'blk_mq_sched_dispatch_requests' 'ext4_mb_regular_allocator' 'shmem_getpage_gfp' 'ext4_mark_iloc_dirty' 'ext4_free_inodes_count' 'expire_timers' 'blk_mq_dispatch_rq_list' 'do_syslog' 'generic_write_end' 'do_select' 'ext4_free_inode' '__ext4_new_inode' 'xas_find_marked' 'pcpu_alloc' 'do_sys_poll' 'do_signal_stop' 'blk_mq_rq_ctx_init' '__send_signal' 'd_set_mounted' 'shmem_file_read_iter' 10:10:28 executing program 0: syzkaller login: [ 109.502370][ T8658] IPVS: ftp: loaded support on port[0] = 21 [ 109.557074][ T8658] chnl_net:caif_netlink_parms(): no params data found [ 109.590082][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.597177][ T8658] bridge0: port 1(bridge_slave_0) entered disabled state 10:10:29 executing program 1: [ 109.605032][ T8658] device bridge_slave_0 entered promiscuous mode [ 109.613045][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.620614][ T8658] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.628416][ T8658] device bridge_slave_1 entered promiscuous mode [ 109.643733][ T8658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.654172][ T8658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.691693][ T8658] team0: Port device team_slave_0 added [ 109.708477][ T8658] team0: Port device team_slave_1 added [ 109.733437][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.742751][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.769217][ T8658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.781415][ T8658] batman_adv: batadv0: Adding interface: batadv_slave_1 10:10:29 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x10000, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfffffffe}, 0x0, 0x0, &(0x7f0000000240)={0x1, 0xe, 0xfcc, 0x7}, &(0x7f0000000280)=0x200, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=0x4}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x7, r2}, 0x8) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r5, 0x0, r3, 0x0, 0xd86dac9, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000280)={0x18, 0x0, {0x0, @empty, 'vxcan1\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0x1, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x2, 0x6, 0x1, 0x80}], &(0x7f0000000080)='GPL\x00', 0x458c1915, 0x4, &(0x7f00000000c0)=""/4, 0x41100, 0x4, [], 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x0, 0x190e}, 0x10, r2, r3}, 0x78) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x3, 0x0, 0x6, 0x9, 0xfffffffffffffff0, 0x1}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x78) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r6, r0, 0x2}, 0x10) socket$l2tp(0xa, 0x2, 0x73) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) [ 109.789059][ T8658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.815738][ T8658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.831317][ T8807] IPVS: ftp: loaded support on port[0] = 21 [ 109.899545][ T8658] device hsr_slave_0 entered promiscuous mode [ 109.928644][ T8658] device hsr_slave_1 entered promiscuous mode [ 110.003532][ T8824] IPVS: ftp: loaded support on port[0] = 21 [ 110.084187][ T8807] chnl_net:caif_netlink_parms(): no params data found 10:10:29 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="51ea7999024f1770397221ca1c2f", 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000f00)="f4"}, 0x40) [ 110.153625][ T8824] chnl_net:caif_netlink_parms(): no params data found [ 110.172047][ T8658] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 110.239499][ T8658] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 110.277848][ T8658] netdevsim netdevsim0 netdevsim2: renamed from eth2 10:10:29 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000000008000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5eab7ff8a8cdc21ce784909b849d5550ad855dab54d8877a6db61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d1106fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee41f5b2e7b91c61ced1ebad000000000000e8122a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e302096a7013c48d2b52ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a02ae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c01840219829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47911834118093b6e1785e9abb835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca08201a14cba24788779291745083fccdddc90d7af35c528d46362ea0d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679d0cda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a764305fbf0dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ced276b38f63f79a88ef13ae1ac2e5ab5130d88385b96aea98bedaf568b73f0939a289ca6ec8aeab17171878726fe93ad7f3d1d635b269a64c9b7225f7a24fa3dc4dcf210ae0f7c0cbaa29c6101063978aa43e682cae694d925afc87a67ca4e45f130ea382"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="51ea7999024f1770397221ca1c2f", 0x0, 0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000f00)="f44f24edc1d3ddf64d068aafaaebe6fa2b62dec27e30eb435feb02e987b7b621409bf3e32f7ae670385c13a900b5b5b28da0a8fc28cb0302509078a0acad353e047640ded84e95762cb1c976b9ae61f8080b6d26d55a46a412ec80603e4b001ecd1a40355bb436089b4221c6f5f024ecd6dbdb73277cd1ddd84a66770a9060acf988496b80ee8af44e25c4148bd1756b2fb9731100b1872862bdc0daab3a07e19be35c5d0a17b2576bcfaec251f5c73081be0c412bc5e803"}, 0x40) [ 110.329307][ T8807] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.337210][ T8807] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.345646][ T8807] device bridge_slave_0 entered promiscuous mode [ 110.357051][ T9094] IPVS: ftp: loaded support on port[0] = 21 [ 110.367383][ T8658] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 110.421772][ T8807] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.429040][ T8807] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.436649][ T8807] device bridge_slave_1 entered promiscuous mode [ 110.453219][ T8658] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.460284][ T8658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.467692][ T8658] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.474805][ T8658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.524187][ T8824] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.533302][ T8824] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.541366][ T8824] device bridge_slave_0 entered promiscuous mode [ 110.569996][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.578023][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.587886][ T8807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.607697][ T8824] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.614845][ T8824] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.624092][ T8824] device bridge_slave_1 entered promiscuous mode [ 110.646496][ T8807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.665384][ T8658] 8021q: adding VLAN 0 to HW filter on device bond0 10:10:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x63565}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}]}, 0x48}}, 0x0) [ 110.698637][ T9094] chnl_net:caif_netlink_parms(): no params data found [ 110.700563][ T9159] IPVS: ftp: loaded support on port[0] = 21 [ 110.719747][ T8824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.735421][ T8807] team0: Port device team_slave_0 added [ 110.742674][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.752548][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.767052][ T8658] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.780734][ T8824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.790937][ T8807] team0: Port device team_slave_1 added [ 110.822393][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.830560][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.856745][ T8807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.869804][ T8807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.877169][ T8807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.903342][ T8807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.921231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.930242][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.938677][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.945694][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.972251][ T8824] team0: Port device team_slave_0 added [ 110.974219][ T9262] IPVS: ftp: loaded support on port[0] = 21 [ 110.996944][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.006188][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.014671][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.021701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.029744][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.038359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.046816][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.055198][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.067318][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.119155][ T8807] device hsr_slave_0 entered promiscuous mode [ 111.167843][ T8807] device hsr_slave_1 entered promiscuous mode [ 111.207633][ T8807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.215171][ T8807] Cannot create hsr debugfs directory [ 111.234785][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.243088][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.252296][ T8824] team0: Port device team_slave_1 added [ 111.258552][ T9094] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.265681][ T9094] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.273151][ T9094] device bridge_slave_0 entered promiscuous mode [ 111.304384][ T9094] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.311740][ T9094] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.319241][ T9094] device bridge_slave_1 entered promiscuous mode [ 111.333086][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.341721][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.359512][ T8658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.370874][ T8658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.382406][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.390377][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.416716][ T8824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.429187][ T8824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.436124][ T8824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.462276][ T8824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.476434][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.484781][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.503870][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 111.515056][ T9094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.556834][ T8658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.565014][ T9094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.577296][ T9262] chnl_net:caif_netlink_parms(): no params data found [ 111.590407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.599180][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.659610][ T8824] device hsr_slave_0 entered promiscuous mode [ 111.717889][ T8824] device hsr_slave_1 entered promiscuous mode [ 111.757739][ T8824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.765311][ T8824] Cannot create hsr debugfs directory [ 111.776983][ T8807] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 111.819428][ T8807] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 111.879842][ T8807] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 111.947387][ T9094] team0: Port device team_slave_0 added [ 111.955141][ T9094] team0: Port device team_slave_1 added [ 111.963836][ T8807] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 112.019429][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.026568][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.034491][ T9159] device bridge_slave_0 entered promiscuous mode [ 112.042374][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.050626][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.058270][ T9159] device bridge_slave_1 entered promiscuous mode [ 112.075627][ T9094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.083141][ T9094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.109508][ T9094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.123805][ T9094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.131350][ T9094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.157942][ T9094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.186810][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.219185][ T9094] device hsr_slave_0 entered promiscuous mode [ 112.257825][ T9094] device hsr_slave_1 entered promiscuous mode [ 112.327643][ T9094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.335197][ T9094] Cannot create hsr debugfs directory [ 112.356871][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.366685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 112.375606][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 112.418464][ T9159] team0: Port device team_slave_0 added [ 112.433929][ T9262] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.441180][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.448954][ T9262] device bridge_slave_0 entered promiscuous mode [ 112.456350][ T9159] team0: Port device team_slave_1 added [ 112.470926][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.478106][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.485634][ T9262] device bridge_slave_1 entered promiscuous mode [ 112.506831][ T8658] device veth0_vlan entered promiscuous mode [ 112.513646][ T8824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.549594][ T8824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.599925][ T9262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.609670][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 112.618395][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.627356][ T9262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.649751][ T8824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.692065][ T8824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.739319][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.746943][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.755395][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.762818][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.788929][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.803278][ T8658] device veth1_vlan entered promiscuous mode [ 112.818166][ T9262] team0: Port device team_slave_0 added [ 112.823795][ T9094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 112.859043][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.866078][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.893228][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.915575][ T9262] team0: Port device team_slave_1 added [ 112.929064][ T9094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 112.964061][ T9094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.021984][ T9094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.080630][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.087620][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.113816][ T9262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.125217][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 113.134826][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 113.148117][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.167345][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.174407][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.201728][ T9262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.269192][ T9262] device hsr_slave_0 entered promiscuous mode [ 113.328583][ T9262] device hsr_slave_1 entered promiscuous mode [ 113.377620][ T9262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.385300][ T9262] Cannot create hsr debugfs directory [ 113.395175][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.403109][ T8658] device veth0_macvtap entered promiscuous mode [ 113.459012][ T9159] device hsr_slave_0 entered promiscuous mode [ 113.507991][ T9159] device hsr_slave_1 entered promiscuous mode [ 113.587754][ T9159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.595304][ T9159] Cannot create hsr debugfs directory [ 113.608514][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.617989][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.625487][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.640358][ T8658] device veth1_macvtap entered promiscuous mode [ 113.661954][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 113.670600][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 113.679445][ T9315] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.686530][ T9315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.718250][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.728005][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 113.736317][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 113.745948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.753017][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.762795][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.771257][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.797054][ T8824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.813159][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 113.824203][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 113.833534][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.842787][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.851628][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.860047][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.873370][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 113.885747][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 113.893536][ T9159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.950431][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.958285][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 113.966281][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.974645][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.982899][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.991505][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.010673][ T9159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.050995][ T9159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.101535][ T8658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.116956][ T9262] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.160335][ T9262] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.229067][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.239828][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.248276][ T9159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.296560][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.310574][ T8824] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.318645][ T9262] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.350158][ T9262] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.400015][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 114.407345][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 114.415043][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.422681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.438237][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 114.446771][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 114.513591][ T9094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.531796][ T8807] device veth0_vlan entered promiscuous mode [ 114.580274][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.589311][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.597413][ T8342] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.604463][ T8342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.612097][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 114.620711][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 114.637830][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.645591][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 114.654070][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 114.663806][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.672816][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.681121][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.688175][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.695832][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.704587][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.715847][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.724391][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.736293][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.750109][ T8807] device veth1_vlan entered promiscuous mode [ 114.765245][ T9094] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.801451][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.809906][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.818736][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 114.826610][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.834440][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.844635][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.856427][ T8824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.869229][ T8824] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.904063][ T8807] device veth0_macvtap entered promiscuous mode [ 114.913071][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.926914][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.935131][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.944147][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.952433][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.959482][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.967099][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.975702][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.988543][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.995662][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.003590][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.012370][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.021211][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 115.029565][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 115.038307][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.046505][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 115.067627][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.076053][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.085056][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.093810][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 115.103716][ T8807] device veth1_macvtap entered promiscuous mode [ 115.119789][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 115.128818][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.136412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.144584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.157897][ T9094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.168851][ T9094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.184857][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.192571][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.201383][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 115.209843][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 115.218556][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 115.226763][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.240558][ T8824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.257807][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 115.268500][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.280593][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.294754][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.302634][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 115.312090][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 115.321213][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.329254][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.336640][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.344653][ T8390] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.353861][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 115.365955][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.377014][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.386544][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.396417][ T9094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.411047][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 115.419689][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 115.428645][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.437240][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.446138][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.454781][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.509062][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.516756][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.525667][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.534036][ T8342] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.541083][ T8342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.549013][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.558492][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.566869][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.575453][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.587594][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.600103][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.608766][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.616316][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.626179][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.634992][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.644983][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.653299][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.660360][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.669373][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.678102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.686276][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.693399][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.701652][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 115.709542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.727534][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.736482][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.749448][ T8824] device veth0_vlan entered promiscuous mode [ 115.858411][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.866512][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.907792][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.926303][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 115.943411][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 10:10:35 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 115.960279][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 115.992641][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.003058][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.013748][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.021847][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.030684][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.041610][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.053296][ T8824] device veth1_vlan entered promiscuous mode [ 116.062865][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.095903][ T9262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.108555][ T9262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.120808][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.128630][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.137329][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.145771][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.153805][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.162368][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.170696][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.179363][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.187824][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.195938][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.204486][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 10:10:35 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 116.219803][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.230227][ T9094] device veth0_vlan entered promiscuous mode [ 116.278183][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.286266][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.296975][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.306763][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.319963][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.328382][ T3941] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.340736][ T9094] device veth1_vlan entered promiscuous mode [ 116.361826][ T9262] 8021q: adding VLAN 0 to HW filter on device batadv0 10:10:35 executing program 0: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 116.372797][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.383960][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.392260][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.418132][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 10:10:35 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x117002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x11ffffce1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24048005) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) [ 116.426915][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.435386][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.450080][ T8824] device veth0_macvtap entered promiscuous mode [ 116.460794][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.484858][ T8824] device veth1_macvtap entered promiscuous mode [ 116.508396][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.516500][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.538335][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.546797][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.557926][ T9094] device veth0_macvtap entered promiscuous mode [ 116.580322][ T9094] device veth1_macvtap entered promiscuous mode [ 116.590465][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.617684][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.628113][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.641206][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.652059][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.668257][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.676238][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.685260][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.698237][ T9315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.708487][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.720027][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.730411][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.741141][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.751774][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 116.763042][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.774491][ T9094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.792759][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.806089][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.817488][ T8824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.828878][ T8824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.841459][ T8824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.857881][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.866543][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.877248][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 10:10:36 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x18}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 116.890787][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.899665][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.918229][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:10:36 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 116.951691][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 116.966576][ T9973] input: syz1 as /devices/virtual/input/input5 [ 116.976859][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.986898][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.006269][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.019954][ T9094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.030723][ T9094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.044561][ T9094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.108370][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.117272][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.159732][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.173507][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.182723][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.191761][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 10:10:36 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 117.211299][ T9262] device veth0_vlan entered promiscuous mode [ 117.286960][ T9973] input: syz1 as /devices/virtual/input/input6 [ 117.288980][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.304377][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.316982][ T9159] device veth0_vlan entered promiscuous mode 10:10:36 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 117.346442][ T9262] device veth1_vlan entered promiscuous mode [ 117.500042][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.508738][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 117.517337][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 117.531790][ T9159] device veth1_vlan entered promiscuous mode [ 117.548227][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.557077][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 117.567115][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 117.575007][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 117.604005][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 117.613034][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.622771][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.640329][ T9262] device veth0_macvtap entered promiscuous mode [ 117.648531][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.656732][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 117.669994][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 117.681415][ T9262] device veth1_macvtap entered promiscuous mode [ 117.691352][ T9159] device veth0_macvtap entered promiscuous mode [ 117.702961][ T9159] device veth1_macvtap entered promiscuous mode [ 117.715772][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.726757][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.739064][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.749721][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.761032][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.772116][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.783020][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.793740][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.806085][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.817361][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.828554][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.839162][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.849943][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.860269][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.870821][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.880808][ T9262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 117.891823][ T9262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.904185][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.912671][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.922477][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.930519][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.938563][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.947180][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.955885][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.964983][ T8342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.974284][ T3941] Bluetooth: hci0: command 0x0409 tx timeout [ 117.975650][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 117.992224][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.003710][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.014781][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.025167][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.036410][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.047025][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.058138][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.068768][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 118.080432][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.091997][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.109526][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.119729][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.131016][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.142215][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.152682][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.163461][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.173681][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.184418][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.194864][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.205475][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.215707][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 118.226811][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.238664][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.301138][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 118.309657][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 10:10:38 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:38 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x18}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) [ 118.780869][T10036] input: syz1 as /devices/virtual/input/input7 [ 118.967737][ T3941] Bluetooth: hci1: command 0x0409 tx timeout [ 119.459111][T10060] netlink: 'syz-executor.5': attribute type 5 has an invalid length. [ 119.470109][T10060] device ipvlan2 entered promiscuous mode 10:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:39 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:39 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:39 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x18}], 0x1) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 10:10:39 executing program 5: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue0\x00'}) 10:10:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280), 0x6) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:39 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:10:39 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x117002, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00', @ANYRES16], 0x44}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) [ 119.703729][T10082] input: syz1 as /devices/virtual/input/input8 10:10:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 119.790211][ C0] hrtimer: interrupt took 28342 ns 10:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:39 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, &(0x7f0000000080)=0xffffffffffffff3f) 10:10:39 executing program 5: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:10:39 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:10:39 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:39 executing program 3: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000001}) prctl$PR_GET_TIMERSLACK(0x1e) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0xfffffff7, 0x0, 0x0) creat(0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) epoll_pwait(r1, &(0x7f00008c9fc4)=[{}], 0x1641, 0xfffffffffffffff7, 0x0, 0x200000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timerfd_settime(r2, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, r3+30000000}}, 0x0) r4 = dup3(r2, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000000)={0x2001}) 10:10:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 120.009681][ T8342] Bluetooth: hci0: command 0x041b tx timeout 10:10:39 executing program 5: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() semtimedop(0x0, &(0x7f0000000080)=[{0x0, 0xde00}], 0x1, &(0x7f0000000240)={0x77359400}) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x17) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:39 executing program 0: sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 10:10:39 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1) 10:10:39 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:39 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:39 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:39 executing program 0: write$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='threaded\x00', 0x11ffffce1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000227bd7000ffdbdf250600000014000600fe8000000000"], 0x44}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x400, 0x70bd28, 0x0, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}}, 0x40080) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 10:10:39 executing program 1: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:39 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) [ 120.558080][ T9314] Bluetooth: hci2: command 0x0409 tx timeout [ 120.637732][ T8342] Bluetooth: hci3: command 0x0409 tx timeout 10:10:40 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000003a80)=ANY=[], 0x6e) 10:10:40 executing program 1: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) 10:10:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 10:10:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) [ 121.037546][ T3941] Bluetooth: hci1: command 0x041b tx timeout 10:10:40 executing program 1: copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:40 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000003a80)=ANY=[], 0x6e) [ 121.091036][T10227] fuseblk: Bad value for 'fd' [ 121.096646][T10230] input: syz1 as /devices/virtual/input/input9 10:10:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) 10:10:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:40 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000003a80)=ANY=[], 0x6e) 10:10:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) [ 121.218069][T10248] fuseblk: Bad value for 'fd' 10:10:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) creat(&(0x7f0000000040)='./bus\x00', 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) [ 121.245853][T10230] input: syz1 as /devices/virtual/input/input10 10:10:40 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) 10:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:40 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000003a80)=ANY=[], 0x6e) 10:10:40 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:40 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) creat(&(0x7f0000000040)='./bus\x00', 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 10:10:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write(0xffffffffffffffff, 0x0, 0x0) 10:10:40 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) creat(&(0x7f0000000040)='./bus\x00', 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) 10:10:40 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 121.452771][T10278] fuseblk: Bad value for 'fd' [ 121.465023][T10276] FAT-fs (loop0): bogus number of reserved sectors [ 121.481757][T10276] FAT-fs (loop0): Can't find a valid FAT filesystem 10:10:40 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 121.507558][T10283] input: syz1 as /devices/virtual/input/input11 [ 121.520023][ T8342] Bluetooth: hci4: command 0x0409 tx timeout [ 121.543992][T10288] FAT-fs (loop0): bogus number of reserved sectors 10:10:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) [ 121.561013][T10288] FAT-fs (loop0): Can't find a valid FAT filesystem 10:10:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:41 executing program 0: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB]) [ 121.619176][T10283] input: syz1 as /devices/virtual/input/input12 10:10:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:41 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) [ 121.677979][ T9314] Bluetooth: hci5: command 0x0409 tx timeout 10:10:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000d00)={'syz1\x00', {}, 0x41}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/81, 0x18}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) write(0xffffffffffffffff, 0x0, 0x0) [ 121.721630][T10308] FAT-fs (loop0): bogus number of reserved sectors [ 121.745738][T10308] FAT-fs (loop0): Can't find a valid FAT filesystem 10:10:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 10:10:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:41 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) [ 121.786141][T10320] input: syz1 as /devices/virtual/input/input13 10:10:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = dup3(r0, 0xffffffffffffffff, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 10:10:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:41 executing program 3: openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x117002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x275a, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x40080) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8923, &(0x7f0000000140)={'syzkaller1\x00', {0x3, 0x0, @empty=0x300}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) 10:10:41 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) 10:10:41 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:41 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:41 executing program 4: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 122.081307][ T48] Bluetooth: hci0: command 0x040f tx timeout 10:10:41 executing program 4: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:41 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:41 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 10:10:41 executing program 0: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:41 executing program 4: mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 122.637573][ T9314] Bluetooth: hci2: command 0x041b tx timeout [ 122.727712][ T3941] Bluetooth: hci3: command 0x041b tx timeout 10:10:42 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) 10:10:42 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(r0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:42 executing program 0: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:42 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:42 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 10:10:42 executing program 0: getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:42 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) [ 122.932520][T10404] fuseblk: Bad value for 'fd' 10:10:42 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:42 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:42 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:42 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) [ 123.060933][T10415] fuseblk: Bad value for 'fd' [ 123.117537][ T3941] Bluetooth: hci1: command 0x040f tx timeout [ 123.599521][ T8342] Bluetooth: hci4: command 0x041b tx timeout 10:10:43 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) 10:10:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x80003, 0x7) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r2, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r2, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:43 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:43 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:43 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) [ 123.765294][ T3941] Bluetooth: hci5: command 0x041b tx timeout [ 123.785092][T10438] fuseblk: Bad value for 'fd' 10:10:43 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:43 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 10:10:43 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) [ 124.157522][ T48] Bluetooth: hci0: command 0x0419 tx timeout 10:10:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:44 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:44 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 10:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:44 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 10:10:44 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x37cb1133) r2 = socket(0xa, 0x3, 0x84) r3 = socket$inet6(0xa, 0x80003, 0x6b) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x18}, 0x200408c9) splice(r0, 0x0, r2, 0x0, 0x19406, 0x0) open(&(0x7f0000001680)='./file0\x00', 0x0, 0x16) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') 10:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xfffffffffffffd68) 10:10:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:44 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 10:10:44 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:44 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 10:10:44 executing program 0: syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0xfffffffffffffd68) [ 124.717462][ T8342] Bluetooth: hci2: command 0x040f tx timeout 10:10:44 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 124.797912][ T8342] Bluetooth: hci3: command 0x040f tx timeout 10:10:44 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) 10:10:44 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r0, r1, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) 10:10:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:44 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) [ 125.198191][ T3941] Bluetooth: hci1: command 0x0419 tx timeout 10:10:44 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x7e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000040)) 10:10:44 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = dup3(r0, r1, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) 10:10:44 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 10:10:44 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:44 executing program 2: r0 = socket$unix(0x1, 0x2, 0x0) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6(0xa, 0x80003, 0x7) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x2141, 0x4) sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}], 0x300, 0xfec0, 0x0) 10:10:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', 0x0, &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:44 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:44 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:45 executing program 4: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuseblk(&(0x7f0000000180)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) 10:10:45 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x6e) 10:10:45 executing program 1: perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) [ 125.678467][ T8342] Bluetooth: hci4: command 0x040f tx timeout [ 125.814864][T10549] ================================================================== [ 125.822977][T10549] BUG: KCSAN: data-race in snd_seq_check_queue / snd_seq_control_queue [ 125.831209][T10549] [ 125.833530][T10549] write to 0xffff888121a78ea4 of 1 bytes by interrupt on cpu 1: [ 125.841151][T10549] snd_seq_check_queue+0x251/0x290 [ 125.846258][T10549] snd_seq_timer_interrupt+0x228/0x240 [ 125.851706][T10549] snd_timer_interrupt+0xa7c/0xb50 [ 125.856804][T10549] snd_hrtimer_callback+0x13a/0x220 [ 125.862012][T10549] __run_hrtimer+0x154/0x4b0 [ 125.866591][T10549] hrtimer_interrupt+0x37c/0xa40 [ 125.871516][T10549] __sysvec_apic_timer_interrupt+0xa3/0x280 [ 125.877397][T10549] asm_call_on_stack+0xf/0x20 [ 125.882084][T10549] sysvec_apic_timer_interrupt+0x80/0xd0 [ 125.887727][T10549] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 125.893725][T10549] kcsan_setup_watchpoint+0x47c/0x4d0 [ 125.899089][T10549] tomoyo_check_path_acl+0x1e/0xe0 [ 125.904190][T10549] tomoyo_check_acl+0xcc/0x220 [ 125.908956][T10549] tomoyo_path_perm+0x22f/0x330 [ 125.913816][T10549] tomoyo_inode_getattr+0x18/0x20 [ 125.918835][T10549] security_inode_getattr+0x7f/0xd0 [ 125.924025][T10549] vfs_statx+0x118/0x2b0 [ 125.928267][T10549] __se_sys_newlstat+0x46/0x250 [ 125.933109][T10549] __x64_sys_newlstat+0x2d/0x40 [ 125.937945][T10549] do_syscall_64+0x51/0xb0 [ 125.942350][T10549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 125.948219][T10549] [ 125.950536][T10549] read to 0xffff888121a78ea4 of 1 bytes by task 10549 on cpu 0: [ 125.958160][T10549] snd_seq_control_queue+0x4f2/0x550 [ 125.963466][T10549] event_input_timer+0x1e/0x30 [ 125.968328][T10549] snd_seq_deliver_single_event+0x31b/0x4f0 [ 125.974298][T10549] snd_seq_deliver_event+0x192/0x4a0 [ 125.979576][T10549] snd_seq_dispatch_event+0x14c/0x270 [ 125.984933][T10549] snd_seq_check_queue+0xfe/0x290 [ 125.989942][T10549] snd_seq_enqueue_event+0x275/0x2b0 [ 125.995198][T10549] snd_seq_client_enqueue_event+0x206/0x2a0 [ 126.001063][T10549] snd_seq_write+0x435/0x550 [ 126.005633][T10549] vfs_write+0x1d6/0x690 [ 126.009847][T10549] ksys_write+0xce/0x180 [ 126.014060][T10549] __x64_sys_write+0x3e/0x50 [ 126.018621][T10549] do_syscall_64+0x51/0xb0 [ 126.023011][T10549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 126.028903][T10549] [ 126.031206][T10549] Reported by Kernel Concurrency Sanitizer on: [ 126.037361][T10549] CPU: 0 PID: 10549 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 126.046012][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.056098][T10549] ================================================================== [ 126.064129][T10549] Kernel panic - not syncing: panic_on_warn set ... [ 126.070714][T10549] CPU: 0 PID: 10549 Comm: syz-executor.1 Not tainted 5.8.0-rc7-syzkaller #0 [ 126.079363][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 126.089389][T10549] Call Trace: [ 126.092656][T10549] dump_stack+0x10f/0x19d [ 126.096958][T10549] panic+0x207/0x64a [ 126.100952][T10549] ? vprintk_emit+0x44a/0x4f0 [ 126.105635][T10549] kcsan_report+0x684/0x690 [ 126.110110][T10549] ? kcsan_setup_watchpoint+0x453/0x4d0 [ 126.115642][T10549] ? snd_seq_control_queue+0x4f2/0x550 [ 126.121072][T10549] ? event_input_timer+0x1e/0x30 [ 126.126437][T10549] ? snd_seq_deliver_single_event+0x31b/0x4f0 [ 126.132480][T10549] ? snd_seq_deliver_event+0x192/0x4a0 [ 126.137915][T10549] ? snd_seq_dispatch_event+0x14c/0x270 [ 126.143451][T10549] ? snd_seq_check_queue+0xfe/0x290 [ 126.148618][T10549] ? snd_seq_enqueue_event+0x275/0x2b0 [ 126.154068][T10549] ? snd_seq_client_enqueue_event+0x206/0x2a0 [ 126.160129][T10549] ? snd_seq_write+0x435/0x550 [ 126.165131][T10549] ? vfs_write+0x1d6/0x690 [ 126.169526][T10549] ? ksys_write+0xce/0x180 [ 126.173917][T10549] ? __x64_sys_write+0x3e/0x50 [ 126.178662][T10549] ? do_syscall_64+0x51/0xb0 [ 126.183223][T10549] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 126.189265][T10549] kcsan_setup_watchpoint+0x453/0x4d0 [ 126.194621][T10549] snd_seq_control_queue+0x4f2/0x550 [ 126.199888][T10549] ? preempt_schedule_irq+0x70/0x90 [ 126.205071][T10549] ? idtentry_exit_cond_resched+0x30/0x40 [ 126.210781][T10549] ? preempt_count_add+0x4e/0x90 [ 126.215972][T10549] ? snd_seq_system_notify+0xa0/0xa0 [ 126.221239][T10549] event_input_timer+0x1e/0x30 [ 126.225976][T10549] snd_seq_deliver_single_event+0x31b/0x4f0 [ 126.231876][T10549] ? kcsan_setup_watchpoint+0x47c/0x4d0 [ 126.237410][T10549] snd_seq_deliver_event+0x192/0x4a0 [ 126.242684][T10549] ? debug_smp_processor_id+0x18/0x20 [ 126.248201][T10549] ? preempt_count_add+0x4e/0x90 [ 126.253108][T10549] ? preempt_count_add+0x4e/0x90 [ 126.258029][T10549] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 126.263819][T10549] snd_seq_dispatch_event+0x14c/0x270 [ 126.269165][T10549] ? preempt_count_add+0x4e/0x90 [ 126.274088][T10549] ? _raw_spin_unlock_irqrestore+0x53/0x70 [ 126.279878][T10549] ? snd_seq_prioq_cell_out+0x1da/0x1f0 [ 126.285405][T10549] snd_seq_check_queue+0xfe/0x290 [ 126.290417][T10549] ? snd_seq_event_dup+0x3c3/0x410 [ 126.295520][T10549] snd_seq_enqueue_event+0x275/0x2b0 [ 126.300787][T10549] snd_seq_client_enqueue_event+0x206/0x2a0 [ 126.307527][T10549] snd_seq_write+0x435/0x550 [ 126.312091][T10549] ? snd_seq_read+0x420/0x420 [ 126.316738][T10549] vfs_write+0x1d6/0x690 [ 126.320969][T10549] ? __fget_light+0x219/0x260 [ 126.325626][T10549] ? set_normalized_timespec64+0x104/0x130 [ 126.331404][T10549] ksys_write+0xce/0x180 [ 126.335620][T10549] __x64_sys_write+0x3e/0x50 [ 126.340182][T10549] do_syscall_64+0x51/0xb0 [ 126.344569][T10549] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 126.350430][T10549] RIP: 0033:0x45cc79 [ 126.354302][T10549] Code: 2d b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 fb b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 126.374574][T10549] RSP: 002b:00007f888a07ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.382962][T10549] RAX: ffffffffffffffda RBX: 0000000000038940 RCX: 000000000045cc79 [ 126.391014][T10549] RDX: 00000000fffffee4 RSI: 00000000200000c0 RDI: 0000000000000003 [ 126.398965][T10549] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 126.406937][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 126.414896][T10549] R13: 00007ffea129c7df R14: 00007f888a07f9c0 R15: 000000000078bf0c [ 126.423906][T10549] Kernel Offset: disabled [ 126.428247][T10549] Rebooting in 86400 seconds..