[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.29' (ECDSA) to the list of known hosts. 2020/09/14 03:06:31 fuzzer started 2020/09/14 03:06:31 dialing manager at 10.128.0.105:43371 2020/09/14 03:06:33 syscalls: 3334 2020/09/14 03:06:33 code coverage: enabled 2020/09/14 03:06:33 comparison tracing: enabled 2020/09/14 03:06:33 extra coverage: enabled 2020/09/14 03:06:33 setuid sandbox: enabled 2020/09/14 03:06:33 namespace sandbox: enabled 2020/09/14 03:06:33 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/14 03:06:33 fault injection: enabled 2020/09/14 03:06:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/14 03:06:33 net packet injection: enabled 2020/09/14 03:06:33 net device setup: enabled 2020/09/14 03:06:33 concurrency sanitizer: enabled 2020/09/14 03:06:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/14 03:06:33 USB emulation: enabled 2020/09/14 03:06:33 hci packet injection: enabled 2020/09/14 03:06:36 suppressing KCSAN reports in functions: '__ext4_new_inode' 'do_nanosleep' 'do_sys_poll' 'generic_write_end' 'blk_mq_dispatch_rq_list' 'generic_file_buffered_read' 'find_get_pages_range_tag' 'kauditd_thread' 'wg_packet_decrypt_worker' '__delayacct_blkio_end' 'blk_mq_rq_ctx_init' '__mod_timer' '__filemap_fdatawrite_range' '__xa_clear_mark' 'ext4_mb_regular_allocator' 'blk_mq_sched_dispatch_requests' 'expire_timers' 'ext4_mb_good_group' 'alloc_pid' 'wbt_issue' 'shmem_mknod' 'ext4_ext_handle_unwritten_extents' 'dd_has_work' 'ext4_free_inode' 'exit_mm' 'do_signal_stop' 'ext4_ext_insert_extent' 'ext4_free_inodes_count' 'snd_rawmidi_poll' 'n_tty_receive_buf_common' 'futex_wait_queue_me' '__mark_inode_dirty' 03:07:02 executing program 0: unshare(0x40600) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x4020940d, &(0x7f0000005d40)={'ip6gre0\x00', 0x0}) 03:07:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) 03:07:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00080000000000000e000000080001007533320014000200080004000002"], 0x40}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 03:07:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:02 executing program 4: ioperm(0x0, 0x1, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x1fdba63a71ca137a) 03:07:02 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) syzkaller login: [ 63.466045][ T8726] IPVS: ftp: loaded support on port[0] = 21 [ 63.538546][ T8726] chnl_net:caif_netlink_parms(): no params data found [ 63.580029][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.587270][ T8726] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.595100][ T8726] device bridge_slave_0 entered promiscuous mode [ 63.602926][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.609954][ T8726] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.617572][ T8726] device bridge_slave_1 entered promiscuous mode [ 63.632018][ T8726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.642756][ T8726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.658262][ T8726] team0: Port device team_slave_0 added [ 63.665153][ T8726] team0: Port device team_slave_1 added [ 63.676883][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.690121][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.718755][ T8726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.731202][ T8726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.738526][ T8726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.765623][ T8726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.787232][ T8728] IPVS: ftp: loaded support on port[0] = 21 [ 63.787530][ T8730] IPVS: ftp: loaded support on port[0] = 21 [ 63.853193][ T8726] device hsr_slave_0 entered promiscuous mode [ 63.859543][ T8726] device hsr_slave_1 entered promiscuous mode [ 63.935405][ T8728] chnl_net:caif_netlink_parms(): no params data found [ 63.972194][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 64.010395][ T8726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.026910][ T8728] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.034189][ T8728] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.042059][ T8728] device bridge_slave_0 entered promiscuous mode [ 64.051619][ T8728] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.058661][ T8728] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.074803][ T8728] device bridge_slave_1 entered promiscuous mode [ 64.084728][ T8726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.105052][ T8726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.118078][ T8732] IPVS: ftp: loaded support on port[0] = 21 [ 64.129871][ T8728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.139390][ T8726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.154504][ T8728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.185569][ T8728] team0: Port device team_slave_0 added [ 64.195127][ T8726] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.202170][ T8726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.209385][ T8726] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.216492][ T8726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.228925][ T8734] IPVS: ftp: loaded support on port[0] = 21 [ 64.238520][ T8728] team0: Port device team_slave_1 added [ 64.291908][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.298851][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.341692][ T8728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.354268][ T8728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.361313][ T8728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.387454][ T8728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.402640][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.409703][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.418113][ T8730] device bridge_slave_0 entered promiscuous mode [ 64.426279][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.433453][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.441020][ T8730] device bridge_slave_1 entered promiscuous mode [ 64.454647][ T8736] IPVS: ftp: loaded support on port[0] = 21 [ 64.464202][ T8728] device hsr_slave_0 entered promiscuous mode [ 64.470760][ T8728] device hsr_slave_1 entered promiscuous mode [ 64.477363][ T8728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.485645][ T8728] Cannot create hsr debugfs directory [ 64.502106][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.527510][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.564560][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.572107][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.627260][ T8730] team0: Port device team_slave_0 added [ 64.642363][ T8732] chnl_net:caif_netlink_parms(): no params data found [ 64.664937][ T8730] team0: Port device team_slave_1 added [ 64.685708][ T8726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.718056][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 64.732914][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.739891][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.767343][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.780208][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 64.804519][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.813185][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.840328][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.874032][ T8726] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.890013][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.897178][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.906181][ T8736] device bridge_slave_0 entered promiscuous mode [ 64.913657][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.921105][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.945274][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.952432][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.959835][ T8736] device bridge_slave_1 entered promiscuous mode [ 64.971299][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.980043][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.988459][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.995500][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.003332][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.011690][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.019957][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.027058][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.034651][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.055971][ T8728] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.067138][ T8728] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.084937][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.092113][ T8732] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.099552][ T8732] device bridge_slave_0 entered promiscuous mode [ 65.108270][ T8730] device hsr_slave_0 entered promiscuous mode [ 65.116657][ T8730] device hsr_slave_1 entered promiscuous mode [ 65.123496][ T8730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.131015][ T8730] Cannot create hsr debugfs directory [ 65.139867][ T8728] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.148296][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.155573][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.163286][ T8734] device bridge_slave_0 entered promiscuous mode [ 65.170182][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.190968][ T8726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.202222][ T8726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.213495][ T8732] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.220584][ T8732] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.229493][ T8732] device bridge_slave_1 entered promiscuous mode [ 65.243505][ T8728] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.253783][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.260818][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.268873][ T8734] device bridge_slave_1 entered promiscuous mode [ 65.275910][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.285474][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.294041][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.303819][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.312327][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.320586][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.329884][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.338193][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.348572][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.359917][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.364959][ T8732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.392224][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.402386][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.410203][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.426856][ T8732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.443609][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.453260][ T8736] team0: Port device team_slave_0 added [ 65.463940][ T8736] team0: Port device team_slave_1 added [ 65.477342][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.485031][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.507258][ T8734] team0: Port device team_slave_0 added [ 65.512936][ T5088] Bluetooth: hci0: command 0x0409 tx timeout [ 65.522186][ T8734] team0: Port device team_slave_1 added [ 65.538440][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.546961][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.574970][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.586543][ T8732] team0: Port device team_slave_0 added [ 65.593830][ T8732] team0: Port device team_slave_1 added [ 65.599741][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.608353][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.634721][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.647358][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.654548][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.680907][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.694895][ T8726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.702500][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.709456][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.735629][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.751348][ T4785] Bluetooth: hci1: command 0x0409 tx timeout [ 65.758251][ T8730] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.779682][ T8734] device hsr_slave_0 entered promiscuous mode [ 65.786996][ T8734] device hsr_slave_1 entered promiscuous mode [ 65.793423][ T8734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.800960][ T8734] Cannot create hsr debugfs directory [ 65.817485][ T8736] device hsr_slave_0 entered promiscuous mode [ 65.824454][ T8736] device hsr_slave_1 entered promiscuous mode [ 65.830633][ T8736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.838463][ T8736] Cannot create hsr debugfs directory [ 65.841539][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 65.850280][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.859109][ T5088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.867944][ T8730] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.882556][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.889488][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.915851][ T8732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.928999][ T8732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.935984][ T8732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.962463][ T8732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.982030][ T8730] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.006336][ T8732] device hsr_slave_0 entered promiscuous mode [ 66.013579][ T8732] device hsr_slave_1 entered promiscuous mode [ 66.019834][ T8732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.027379][ T8732] Cannot create hsr debugfs directory [ 66.033144][ T8730] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.066547][ T8726] device veth0_vlan entered promiscuous mode [ 66.073012][ T12] Bluetooth: hci3: command 0x0409 tx timeout [ 66.081006][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.091593][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.100178][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.108427][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.146109][ T8726] device veth1_vlan entered promiscuous mode [ 66.155883][ T8728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.179229][ T8734] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.198926][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.206982][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.215013][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.222952][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.230410][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.239097][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.247834][ T8734] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.254689][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 66.264469][ T8734] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.274000][ T8726] device veth0_macvtap entered promiscuous mode [ 66.285656][ T8734] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.306259][ T8728] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.312945][ T49] Bluetooth: hci5: command 0x0409 tx timeout [ 66.320951][ T8726] device veth1_macvtap entered promiscuous mode [ 66.328427][ T8736] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.355024][ T8736] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.364307][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.372708][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.380363][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.388820][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.397195][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.404230][ T9207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.412211][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.420760][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.428977][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.436024][ T9207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.443730][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.452364][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.461033][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.469374][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.477918][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.486301][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.496758][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.504542][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.521479][ T8736] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.533845][ T8732] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.546931][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.555407][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.563645][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.572842][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.584021][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.592552][ T8736] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.608360][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.615572][ T8732] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.624218][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.633454][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.645586][ T8726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.654806][ T8732] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.666548][ T8732] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.682646][ T8728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.690106][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.698945][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.710546][ T8726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.723251][ T8726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.732004][ T8726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.740964][ T8726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.756088][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.770786][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.778769][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.786756][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.795843][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.804380][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.811796][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.819563][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.827923][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.836302][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.843409][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.870807][ T8728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.884751][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.892489][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.899834][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.909025][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.924476][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.951182][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.960134][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.968885][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.977324][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.985703][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.994086][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.002222][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.010257][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.018385][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.048999][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.062444][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.074213][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.084489][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.094305][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 03:07:06 executing program 0: unshare(0x40600) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x4020940d, &(0x7f0000005d40)={'ip6gre0\x00', 0x0}) [ 67.120485][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.131459][ T8730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.148972][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.164135][ T8728] device veth0_vlan entered promiscuous mode 03:07:07 executing program 0: unshare(0x40600) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x4020940d, &(0x7f0000005d40)={'ip6gre0\x00', 0x0}) 03:07:07 executing program 0: unshare(0x40600) r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x4020940d, &(0x7f0000005d40)={'ip6gre0\x00', 0x0}) [ 67.186781][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.195179][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.211443][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.219660][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 03:07:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) [ 67.241709][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.267879][ T8728] device veth1_vlan entered promiscuous mode [ 67.287135][ T8732] 8021q: adding VLAN 0 to HW filter on device bond0 03:07:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) [ 67.312876][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.331393][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.338986][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.347289][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.357988][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.366890][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.373928][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.386521][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 03:07:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) [ 67.410796][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.419686][ T3439] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.426781][ T3439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.438901][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 03:07:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x30}}, 0x0) [ 67.461812][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.470701][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.481415][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.489814][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.500164][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.513348][ T3439] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.520383][ T3439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.538300][ T8734] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.551685][ T8734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.572626][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.586344][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.594565][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.604794][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.613183][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.620847][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.631620][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.640241][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.650303][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.658836][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.668372][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.676649][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.684726][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.692307][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.700598][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.708885][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.715956][ T9207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.723938][ T9207] Bluetooth: hci0: command 0x041b tx timeout [ 67.730916][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.738635][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.758670][ T8728] device veth0_macvtap entered promiscuous mode [ 67.767018][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.775997][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.786377][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.794697][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.808448][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.818433][ T8732] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.831311][ T3439] Bluetooth: hci1: command 0x041b tx timeout [ 67.840091][ T8728] device veth1_macvtap entered promiscuous mode [ 67.847449][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.856031][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.864240][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.871968][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.879392][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.887482][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.903827][ T8730] device veth0_vlan entered promiscuous mode [ 67.917181][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.926159][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.934933][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.943680][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.950754][ T9207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.958593][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.967217][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.975750][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.984284][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.992752][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.999762][ T9207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.007510][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.015676][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.024418][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.032979][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.041317][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.049384][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.062727][ T8736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.073117][ T9207] Bluetooth: hci2: command 0x041b tx timeout [ 68.076192][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.103915][ T8730] device veth1_vlan entered promiscuous mode [ 68.110625][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.118906][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.129905][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.137974][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.146076][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.154247][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.162700][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.170697][ T3439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.183763][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.194770][ T9207] Bluetooth: hci3: command 0x041b tx timeout [ 68.195845][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.212773][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.237879][ T8732] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.248342][ T8732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.260667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.268665][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.278337][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.287359][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.297379][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.305925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.314649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.321139][ T9207] Bluetooth: hci4: command 0x041b tx timeout [ 68.323174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.337016][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.345088][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.353478][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.361561][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.369578][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.376982][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.386352][ T8728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.398092][ T12] Bluetooth: hci5: command 0x041b tx timeout [ 68.398497][ T8728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.415819][ T8728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.427597][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.436825][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.445281][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.452988][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.461868][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.476073][ T8730] device veth0_macvtap entered promiscuous mode [ 68.492831][ T8730] device veth1_macvtap entered promiscuous mode [ 68.511056][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.519273][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.528390][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.536309][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.543779][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.551327][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.559859][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.569268][ T8728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.579030][ T8728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587862][ T8728] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.596871][ T8728] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.607618][ T8732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.625053][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.635636][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.647003][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 68.657828][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.668951][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.676459][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.685698][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.693929][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.703781][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.712532][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.722848][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.730301][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.738970][ T8734] device veth0_vlan entered promiscuous mode [ 68.752723][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.764091][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.773924][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 68.784452][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.796876][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.811514][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.820307][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.829283][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.838185][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.853565][ T8734] device veth1_vlan entered promiscuous mode [ 68.862074][ T8730] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.870833][ T8730] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.880319][ T8730] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.889073][ T8730] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.904637][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.915531][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.928758][ T8732] device veth0_vlan entered promiscuous mode [ 68.946523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.954585][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.964649][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.972667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.993592][ T8736] device veth0_vlan entered promiscuous mode [ 69.001316][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.009637][ T9207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.030469][ T8732] device veth1_vlan entered promiscuous mode [ 69.045366][ T8736] device veth1_vlan entered promiscuous mode 03:07:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) [ 69.055380][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.064051][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.073610][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.081472][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.092812][ T8734] device veth0_macvtap entered promiscuous mode [ 69.124668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.143960][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.162497][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.175000][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.184359][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.194762][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.205189][ T8734] device veth1_macvtap entered promiscuous mode [ 69.221179][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.241982][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.254202][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.286863][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.307183][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.328498][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.345705][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.356482][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.367254][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.378403][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.388440][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.399164][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.409337][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.420211][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.430226][ T8734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.441906][ T8734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.452856][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.461100][ T8732] device veth0_macvtap entered promiscuous mode [ 69.470192][ T8732] device veth1_macvtap entered promiscuous mode [ 69.478511][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.486426][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.494787][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.503366][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.512584][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.521094][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.540072][ T8736] device veth0_macvtap entered promiscuous mode [ 69.549576][ T8734] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.561293][ T8734] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.570146][ T8734] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.579299][ T8734] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.589147][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.601655][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.609942][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.621314][ T8736] device veth1_macvtap entered promiscuous mode [ 69.628673][T10087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00080000000000000e000000080001007533320014000200080004000002"], 0x40}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) [ 69.641512][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.653624][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.661674][ T4785] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.674191][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.685606][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.698224][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.709793][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.719926][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.735069][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.745208][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.755783][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 69.761893][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.772596][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.787492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.796090][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.805884][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.820418][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.830980][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.840833][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.853192][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.864062][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.874949][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.885696][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.896524][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.907241][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.917803][ T12] Bluetooth: hci1: command 0x040f tx timeout [ 69.924860][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.935759][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.945989][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.956480][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.966910][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.977402][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.987242][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.997994][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.007818][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.018247][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.029073][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.037714][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.050966][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.059461][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.068179][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.078753][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.112195][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.131021][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.140840][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.151067][ T5088] Bluetooth: hci2: command 0x040f tx timeout [ 70.175269][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.201059][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.212192][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.222302][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.232955][ T17] Bluetooth: hci3: command 0x040f tx timeout [ 70.239097][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.249106][ T8732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.259522][ T8732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.270254][ T8732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.281883][ T8736] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.290555][ T8736] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.301239][ T8736] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.309979][ T8736] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322172][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.330706][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.341720][ T8732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.350386][ T8732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.359278][ T8732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.368160][ T8732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.392589][ T17] Bluetooth: hci4: command 0x040f tx timeout [ 70.433781][ C1] hrtimer: interrupt took 13650 ns 03:07:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 03:07:10 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) 03:07:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00080000000000000e000000080001007533320014000200080004000002"], 0x40}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 03:07:10 executing program 4: ioperm(0x0, 0x1, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x1fdba63a71ca137a) [ 70.471254][ T12] Bluetooth: hci5: command 0x040f tx timeout 03:07:10 executing program 4: ioperm(0x0, 0x1, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x1fdba63a71ca137a) 03:07:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x38}}, 0x0) 03:07:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) [ 70.530762][T10122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.570724][T10122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:10 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 03:07:10 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 03:07:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=ANY=[@ANYBLOB='@\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r2, @ANYBLOB="00080000000000000e000000080001007533320014000200080004000002"], 0x40}}, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000180), 0x27a4eaa51029717, 0x0) 03:07:10 executing program 4: ioperm(0x0, 0x1, 0x4) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x1fdba63a71ca137a) 03:07:10 executing program 5: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) [ 70.729471][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:10 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) [ 70.807107][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 03:07:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 03:07:10 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) connect(r1, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0], 0x1c}, 0x0) close(r0) r2 = socket$unix(0x1, 0x5, 0x0) close(r2) 03:07:10 executing program 4: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\trust\xe3cusgrVex:De', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x0, [{0x8, 0x3}, {}]}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x40}, 0x20) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x4) 03:07:10 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:10 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x101082, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) ioctl$SNDCTL_DSP_SYNC(r0, 0x80045017, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) 03:07:10 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) 03:07:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) dup3(r0, r1, 0x0) 03:07:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) 03:07:11 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=lower,discard,shortname=win95,dos1xfloppy']) 03:07:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200d9fd3257fd3fb5800400008004000480080003400000000a14000480090003"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 03:07:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) 03:07:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) dup3(r0, r1, 0x0) 03:07:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) [ 71.339486][T10247] FAT-fs (loop4): bogus number of reserved sectors 03:07:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) dup3(r0, r1, 0x0) [ 71.395684][T10247] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 71.396383][ T28] audit: type=1804 audit(1600052831.226:2): pid=10256 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir048220024/syzkaller.iV5GHD/7/cgroup.controllers" dev="sda1" ino=15779 res=1 errno=0 [ 71.417954][T10247] FAT-fs (loop4): Can't find a valid FAT filesystem 03:07:11 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200d9fd3257fd3fb5800400008004000480080003400000000a14000480090003"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) [ 71.472030][T10247] FAT-fs (loop4): bogus number of reserved sectors [ 71.479765][T10247] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 03:07:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) 03:07:11 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newnexthop={0x18, 0x68, 0x3, 0x0, 0x0, {0x3}}, 0x18}}, 0x0) [ 71.525681][T10247] FAT-fs (loop4): Can't find a valid FAT filesystem 03:07:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:11 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=lower,discard,shortname=win95,dos1xfloppy']) 03:07:11 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) dup3(r0, r1, 0x0) [ 71.655306][ T28] audit: type=1804 audit(1600052831.486:3): pid=10271 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir048220024/syzkaller.iV5GHD/8/cgroup.controllers" dev="sda1" ino=15790 res=1 errno=0 03:07:11 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) [ 71.721005][T10271] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 03:07:11 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) [ 71.784583][T10292] FAT-fs (loop4): bogus number of reserved sectors [ 71.799870][T10292] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 71.809512][T10292] FAT-fs (loop4): Can't find a valid FAT filesystem 03:07:11 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) [ 71.831592][ T5088] Bluetooth: hci0: command 0x0419 tx timeout 03:07:11 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:11 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=lower,discard,shortname=win95,dos1xfloppy']) [ 71.991322][ T5088] Bluetooth: hci1: command 0x0419 tx timeout [ 72.016433][T10321] FAT-fs (loop4): bogus number of reserved sectors [ 72.023073][T10321] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 72.032822][T10321] FAT-fs (loop4): Can't find a valid FAT filesystem 03:07:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200d9fd3257fd3fb5800400008004000480080003400000000a14000480090003"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 03:07:12 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'virt_wifi0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0x4, r6}]}, 0x44}}, 0x0) 03:07:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x6c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7", 0x1) 03:07:12 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:12 executing program 4: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='shortname=lower,discard,shortname=win95,dos1xfloppy']) [ 72.231312][ T5088] Bluetooth: hci2: command 0x0419 tx timeout [ 72.312493][ T5088] Bluetooth: hci3: command 0x0419 tx timeout [ 72.336961][T10340] FAT-fs (loop4): bogus number of reserved sectors 03:07:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = dup(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r1, 0xffffffffffffffff, 0x0) [ 72.357930][T10340] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; no bootstrapping code 03:07:12 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = gettid() tkill(r1, 0x3d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x80000000, 0x0) sendfile(r2, r0, 0x0, 0x10001ff) [ 72.393882][T10340] FAT-fs (loop4): Can't find a valid FAT filesystem 03:07:12 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x400}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) 03:07:12 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6e, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 72.458886][T10357] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.471008][ T12] Bluetooth: hci4: command 0x0419 tx timeout 03:07:12 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = gettid() tkill(r1, 0x3d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x80000000, 0x0) sendfile(r2, r0, 0x0, 0x10001ff) [ 72.509646][ T28] audit: type=1804 audit(1600052832.336:4): pid=10354 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir048220024/syzkaller.iV5GHD/9/cgroup.controllers" dev="sda1" ino=15792 res=1 errno=0 [ 72.542732][T10354] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 72.550960][ T12] Bluetooth: hci5: command 0x0419 tx timeout 03:07:12 executing program 4: syz_open_dev$sndctrl(0xfffffffffffffffe, 0x0, 0x0) [ 72.602856][T10376] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 72.636265][T10376] team0: Device ipvlan1 failed to register rx_handler 03:07:12 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000002c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000000000000000000000000000000a20000000000a010000000010af000000000000000900010073797a300000000070000000120a0100000000000000000000000000040004800900020073797a30000000000900010073797a3000000000080003400000000009000200d9fd3257fd3fb5800400008004000480080003400000000a14000480090003"], 0xb8}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000002) 03:07:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = dup(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r1, 0xffffffffffffffff, 0x0) 03:07:12 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = gettid() tkill(r1, 0x3d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x80000000, 0x0) sendfile(r2, r0, 0x0, 0x10001ff) 03:07:12 executing program 4: syz_open_dev$sndctrl(0xfffffffffffffffe, 0x0, 0x0) [ 72.815188][T10376] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 72.852336][T10376] team0: Device ipvlan1 failed to register rx_handler 03:07:12 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='sessionid\x00') r1 = gettid() tkill(r1, 0x3d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(0x0, 0x0, 0x80000000, 0x0) sendfile(r2, r0, 0x0, 0x10001ff) 03:07:12 executing program 4: syz_open_dev$sndctrl(0xfffffffffffffffe, 0x0, 0x0) 03:07:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = dup(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r1, 0xffffffffffffffff, 0x0) 03:07:12 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000002c0), 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 03:07:12 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6e, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 72.981131][ T28] audit: type=1804 audit(1600052832.816:5): pid=10405 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir048220024/syzkaller.iV5GHD/10/cgroup.controllers" dev="sda1" ino=15805 res=1 errno=0 [ 73.020580][T10401] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 73.070534][T10420] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 73.080533][T10420] team0: Device ipvlan1 failed to register rx_handler 03:07:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = dup(r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x841, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close_range(r1, 0xffffffffffffffff, 0x0) 03:07:13 executing program 4: syz_open_dev$sndctrl(0xfffffffffffffffe, 0x0, 0x0) 03:07:13 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6e, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 73.186090][T10420] syz-executor.0 (10420) used greatest stack depth: 9720 bytes left 03:07:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef24080000000a9386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) [ 73.232372][T10429] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 73.253693][T10429] team0: Device ipvlan1 failed to register rx_handler 03:07:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}]}, 0x1c}}, 0x0) 03:07:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) 03:07:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r5, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000006f0010000000", @ANYRES32=r5], 0x20}}, 0x0) 03:07:13 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) [ 73.360885][T10437] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 73.385511][T10441] attempt to access beyond end of device [ 73.392969][T10441] loop3: rw=2049, want=66, limit=60 [ 73.398773][T10441] attempt to access beyond end of device 03:07:13 executing program 0: perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x6e, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0xffffff9e, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e00000010008188040f80ecdb4cb9cca7480ef43c000000e3bd6efb440e09000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x0, 0xfffff000}, 0x0) [ 73.414047][T10441] loop3: rw=2049, want=64, limit=60 03:07:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}]}, 0x1c}}, 0x0) 03:07:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000044d5700bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000030000000b70000000000000095000000000000000ce0f7af2b75d0d1f034b1b552e6bf2574b5bc6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55aa8ff822ca943354aa8a6d2c1ba15edfe0969a9ddc125b646060000000000003495375883639e97a3a7149a5e740618b95cf8691095acb6dfaf720cd61755b01000000000e4d0592e4c2927ee73884350da9f8979b4dfb1505d283472853b43a4129564bb8fd33f51535f9e6b3d425f4d52c62f9e34cf32e0fbb0b4fc5955b634c8d9184f2ee0282bb28551ad667c9072988dad7f3987e156e42bff0f0000bba446c7a298863ad70aab4ed287bfa38251dd4ee1b011771191827be1eeb4156cf599f3371336d68d4d002ed93cf4a8e53e812430a67c8329afa9e3e3252bcdf54250284764a95d598ab12d912e4611a70ec8eb0d2bff7976218f8001e295e4f899700aa170d88494ecf15e31415c4ba6458f16756362468f3a03349a27f414383c4ab67e9765e4df4ed35132b8d302e30608e8544ea9a3f39a356ce965cd7f9b7bfbad46fe795e55736c1d4beaaa3dffd5140a42f20f08cdf1750121bfd639fedfd1307c363fdc93f96eaec9f85f5f55a162ee7233ed2ebda9691a904041fd56b45ac9ac96d305d988ead4ff4d1736eae0d24ee032990a39a85026faa41e2fa845db18a90ef239944b248ad26caee37394c6e6464f627eb265f11d460df345a47dd7b7177e38122f4cea9bea464c0ee79e5e74860367c828817d89d2e62aec82da05bad7d7965a890029e2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef24080000000a9386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:07:13 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 03:07:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}]}, 0x1c}}, 0x0) [ 73.436358][T10446] device veth3 entered promiscuous mode [ 73.470833][T10441] Buffer I/O error on dev loop3, logical block 31, lost async page write 03:07:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x10}]}, 0x1c}}, 0x0) 03:07:13 executing program 5: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) [ 73.532840][T10451] attempt to access beyond end of device [ 73.538668][T10451] loop3: rw=0, want=64, limit=60 03:07:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000044d5700bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000030000000b70000000000000095000000000000000ce0f7af2b75d0d1f034b1b552e6bf2574b5bc6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55aa8ff822ca943354aa8a6d2c1ba15edfe0969a9ddc125b646060000000000003495375883639e97a3a7149a5e740618b95cf8691095acb6dfaf720cd61755b01000000000e4d0592e4c2927ee73884350da9f8979b4dfb1505d283472853b43a4129564bb8fd33f51535f9e6b3d425f4d52c62f9e34cf32e0fbb0b4fc5955b634c8d9184f2ee0282bb28551ad667c9072988dad7f3987e156e42bff0f0000bba446c7a298863ad70aab4ed287bfa38251dd4ee1b011771191827be1eeb4156cf599f3371336d68d4d002ed93cf4a8e53e812430a67c8329afa9e3e3252bcdf54250284764a95d598ab12d912e4611a70ec8eb0d2bff7976218f8001e295e4f899700aa170d88494ecf15e31415c4ba6458f16756362468f3a03349a27f414383c4ab67e9765e4df4ed35132b8d302e30608e8544ea9a3f39a356ce965cd7f9b7bfbad46fe795e55736c1d4beaaa3dffd5140a42f20f08cdf1750121bfd639fedfd1307c363fdc93f96eaec9f85f5f55a162ee7233ed2ebda9691a904041fd56b45ac9ac96d305d988ead4ff4d1736eae0d24ee032990a39a85026faa41e2fa845db18a90ef239944b248ad26caee37394c6e6464f627eb265f11d460df345a47dd7b7177e38122f4cea9bea464c0ee79e5e74860367c828817d89d2e62aec82da05bad7d7965a890029e2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef24080000000a9386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:07:13 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) [ 73.577183][T10441] attempt to access beyond end of device [ 73.584398][T10441] loop3: rw=2049, want=72, limit=60 [ 73.594005][T10451] attempt to access beyond end of device [ 73.613916][T10451] loop3: rw=2049, want=72, limit=60 03:07:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) [ 73.765768][T10478] attempt to access beyond end of device [ 73.771599][T10478] loop3: rw=2049, want=66, limit=60 [ 73.776904][T10437] device hsr_slave_1 left promiscuous mode [ 73.778096][T10478] attempt to access beyond end of device [ 73.789716][T10478] loop3: rw=2049, want=64, limit=60 [ 73.795047][T10455] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 73.795500][T10478] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 73.811713][T10455] team0: Device ipvlan1 failed to register rx_handler [ 73.828994][T10478] attempt to access beyond end of device [ 73.835087][T10478] loop3: rw=0, want=64, limit=60 [ 73.876361][T10437] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 73.898944][T10437] device bond1 entered promiscuous mode [ 73.915948][T10437] device veth3 entered promiscuous mode 03:07:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r5, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000006f0010000000", @ANYRES32=r5], 0x20}}, 0x0) 03:07:13 executing program 5: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 03:07:13 executing program 4: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 03:07:13 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b7020000044d5700bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000030000000b70000000000000095000000000000000ce0f7af2b75d0d1f034b1b552e6bf2574b5bc6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55aa8ff822ca943354aa8a6d2c1ba15edfe0969a9ddc125b646060000000000003495375883639e97a3a7149a5e740618b95cf8691095acb6dfaf720cd61755b01000000000e4d0592e4c2927ee73884350da9f8979b4dfb1505d283472853b43a4129564bb8fd33f51535f9e6b3d425f4d52c62f9e34cf32e0fbb0b4fc5955b634c8d9184f2ee0282bb28551ad667c9072988dad7f3987e156e42bff0f0000bba446c7a298863ad70aab4ed287bfa38251dd4ee1b011771191827be1eeb4156cf599f3371336d68d4d002ed93cf4a8e53e812430a67c8329afa9e3e3252bcdf54250284764a95d598ab12d912e4611a70ec8eb0d2bff7976218f8001e295e4f899700aa170d88494ecf15e31415c4ba6458f16756362468f3a03349a27f414383c4ab67e9765e4df4ed35132b8d302e30608e8544ea9a3f39a356ce965cd7f9b7bfbad46fe795e55736c1d4beaaa3dffd5140a42f20f08cdf1750121bfd639fedfd1307c363fdc93f96eaec9f85f5f55a162ee7233ed2ebda9691a904041fd56b45ac9ac96d305d988ead4ff4d1736eae0d24ee032990a39a85026faa41e2fa845db18a90ef239944b248ad26caee37394c6e6464f627eb265f11d460df345a47dd7b7177e38122f4cea9bea464c0ee79e5e74860367c828817d89d2e62aec82da05bad7d7965a890029e2"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="e460cdfbef24080000000a9386dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 03:07:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) 03:07:13 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) [ 73.924742][T10437] bond1: (slave veth3): Enslaving as an active interface with an up link [ 74.005853][T10532] device veth5 entered promiscuous mode [ 74.062949][T10542] attempt to access beyond end of device [ 74.068737][T10542] loop0: rw=2049, want=66, limit=60 [ 74.083205][T10544] attempt to access beyond end of device [ 74.106102][T10544] loop3: rw=2049, want=66, limit=60 03:07:13 executing program 5: open(&(0x7f0000000080)='./bus\x00', 0x430c2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./bus\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) 03:07:13 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) 03:07:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) [ 74.114524][T10542] attempt to access beyond end of device [ 74.178162][T10542] loop0: rw=2049, want=64, limit=60 [ 74.178476][T10548] attempt to access beyond end of device [ 74.189348][T10548] loop3: rw=2049, want=64, limit=60 [ 74.195290][T10542] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 74.204882][T10548] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 74.218829][T10553] attempt to access beyond end of device [ 74.224787][T10553] loop0: rw=0, want=64, limit=60 03:07:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r5, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000006f0010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 74.260081][T10554] attempt to access beyond end of device [ 74.266908][T10554] loop3: rw=0, want=64, limit=60 [ 74.279371][T10561] attempt to access beyond end of device 03:07:14 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) write(r0, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/237, 0xed) 03:07:14 executing program 3: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) 03:07:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) [ 74.308875][T10567] __nla_validate_parse: 9 callbacks suppressed [ 74.308882][T10567] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.331786][T10567] device veth5 entered promiscuous mode [ 74.337521][T10561] loop4: rw=2049, want=66, limit=60 03:07:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) [ 74.372094][T10568] attempt to access beyond end of device [ 74.378213][T10568] loop4: rw=2049, want=64, limit=60 [ 74.391344][T10568] Buffer I/O error on dev loop4, logical block 31, lost async page write [ 74.400010][T10579] attempt to access beyond end of device [ 74.405957][T10579] loop4: rw=0, want=64, limit=60 03:07:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) 03:07:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) [ 74.498246][T10590] attempt to access beyond end of device [ 74.521927][T10589] attempt to access beyond end of device [ 74.527696][T10590] loop0: rw=2049, want=66, limit=60 [ 74.546955][T10589] loop3: rw=2049, want=66, limit=60 [ 74.556003][T10594] attempt to access beyond end of device [ 74.573055][T10596] attempt to access beyond end of device [ 74.596462][T10594] loop0: rw=2049, want=64, limit=60 [ 74.610405][T10596] loop3: rw=2049, want=64, limit=60 [ 74.627632][T10594] Buffer I/O error on dev loop0, logical block 31, lost async page write [ 74.642309][T10596] Buffer I/O error on dev loop3, logical block 31, lost async page write [ 74.653517][T10590] attempt to access beyond end of device [ 74.659238][T10590] loop0: rw=0, want=64, limit=60 03:07:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) 03:07:14 executing program 0: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) [ 74.717749][T10601] attempt to access beyond end of device [ 74.733463][T10589] attempt to access beyond end of device [ 74.739522][T10589] loop3: rw=0, want=64, limit=60 [ 74.760097][T10601] loop4: rw=2049, want=66, limit=60 [ 74.793664][T10605] attempt to access beyond end of device [ 74.800474][T10605] loop4: rw=2049, want=64, limit=60 [ 74.828875][T10605] Buffer I/O error on dev loop4, logical block 31, lost async page write 03:07:14 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) 03:07:14 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) [ 74.849924][T10609] attempt to access beyond end of device [ 74.862161][T10609] loop4: rw=0, want=64, limit=60 03:07:14 executing program 4: syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file1\x00', 0x79d7, 0x1, &(0x7f0000000300)=[{&(0x7f0000000140)="040005090000000066617400040409000200027400f801", 0x17}], 0x90, &(0x7f0000000080)=ANY=[]) chdir(&(0x7f0000000000)='./file1\x00') r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r1, 0x800) write$FUSE_DIRENT(r1, &(0x7f0000000180)={0x10}, 0x10) write$ppp(r0, &(0x7f0000000080)="fe", 0x1) 03:07:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100085060002b4aa9bf211d328000000", @ANYRES32=r5, @ANYBLOB="fe2f0000000000001c0012000c000100626f6e6400000e000c0002000800110001"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00f9ffffffffffff27001200090001007665746800000000180002001400f5a287690000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r5], 0x50}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d040000000000006f0010000000", @ANYRES32=r5], 0x20}}, 0x0) [ 75.178422][T10625] attempt to access beyond end of device [ 75.195485][T10625] loop4: rw=2049, want=66, limit=60 [ 75.202319][T10625] attempt to access beyond end of device [ 75.208061][T10625] loop4: rw=2049, want=64, limit=60 [ 75.214026][T10625] Buffer I/O error on dev loop4, logical block 31, lost async page write 03:07:15 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) r2 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r1, 0x0, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000080), 0x0, 0x0, 0x8) write(r0, &(0x7f00000001c0), 0xfffffef3) read(r2, &(0x7f0000000200)=""/237, 0xed) 03:07:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) 03:07:15 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0105502, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:07:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) [ 75.260774][T10646] attempt to access beyond end of device [ 75.266516][T10646] loop4: rw=0, want=64, limit=60 [ 75.308567][T10652] device bond2 entered promiscuous mode [ 75.322825][T10652] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.337619][T10652] device veth5 entered promiscuous mode [ 75.345249][T10652] bond2: (slave veth5): Enslaving as an active interface with an up link 03:07:15 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) 03:07:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r4}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 03:07:15 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000000)='u', 0x1, 0xfffffffffffffffd) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)="b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3903dd4a71c2ffffff7f000000002d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50eaa3c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e425561f6110fd7b06f90b5274cc5c1e298a1604000000a2a9d5ba9ff3c00973f4772539000000000000000000261849a6", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r0, r1, r0}, &(0x7f0000000300)=""/242, 0xf2, &(0x7f0000000080)={&(0x7f0000000180)={'crct10dif-pclmul\x00'}}) [ 75.364905][T10652] bond2 (unregistering): (slave veth5): Releasing backup interface 03:07:15 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) lsetxattr$security_capability(&(0x7f0000000000)='./bus/file0\x00', &(0x7f0000000640)='security.capability\x00', 0x0, 0x0, 0x0) [ 75.446799][T10652] bond2 (unregistering): Released all slaves 03:07:15 executing program 2: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0/file2\x00') 03:07:15 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket(0x15, 0x80005, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0105502, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) 03:07:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f00000001c0)={0x7b}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000007, 0x0, 0x0, 0x0, 0x4cb, 0x9], 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={&(0x7f0000000240), &(0x7f0000000380)=""/131, &(0x7f0000000440), &(0x7f0000001440), 0x0, 0x1}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0xfe, 0x0, 0x5, 0x0, 0x80000001, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @perf_bp={&(0x7f0000000600), 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 75.558633][T10740] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.628922][T10740] overlayfs: filesystem on './bus' not supported as upperdir 03:07:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000600)='/dev/null\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x9c2, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) r4 = syz_open_dev$sndmidi(&(0x7f0000653fee)='/dev/snd/midiC#D#\x00', 0x200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, r4}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 75.729910][T10754] kvm [10751]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x4000007f data 0xae [ 75.752971][T10754] kvm [10751]: vcpu0, guest rIP: 0x14c Hyper-V unhandled wrmsr: 0x40000086 data 0x81 [ 75.773545][T10760] ================================================================== [ 75.781646][T10760] BUG: KCSAN: data-race in __io_cqring_fill_event / io_req_defer [ 75.789516][T10760] [ 75.791837][T10760] write to 0xffff8880abd8c1c0 of 4 bytes by task 10762 on cpu 0: [ 75.799573][T10760] __io_cqring_fill_event+0x116/0x410 [ 75.804937][T10760] __io_req_complete+0xd8/0x1a0 [ 75.809860][T10760] io_issue_sqe+0x7249/0x78d0 [ 75.814884][T10760] io_wq_submit_work+0x23e/0x340 [ 75.819814][T10760] io_worker_handle_work+0xa69/0xcf0 [ 75.825273][T10760] io_wqe_worker+0x1f2/0x860 [ 75.830427][T10760] kthread+0x20d/0x230 [ 75.834744][T10760] ret_from_fork+0x1f/0x30 [ 75.839312][T10760] [ 75.841648][T10760] read to 0xffff8880abd8c1c0 of 4 bytes by task 10760 on cpu 1: [ 75.849645][T10760] io_req_defer+0x3b6/0x550 [ 75.854142][T10760] io_queue_sqe+0x21/0x220 [ 75.858567][T10760] io_submit_sqe+0x333/0x550 [ 75.863146][T10760] io_submit_sqes+0x8c6/0xfb0 [ 75.867809][T10760] __se_sys_io_uring_enter+0x1c2/0x720 [ 75.873264][T10760] __x64_sys_io_uring_enter+0x74/0x80 [ 75.878647][T10760] do_syscall_64+0x39/0x80 [ 75.883079][T10760] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 75.888948][T10760] [ 75.891262][T10760] Reported by Kernel Concurrency Sanitizer on: [ 75.897401][T10760] CPU: 1 PID: 10760 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 75.906047][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.916100][T10760] ================================================================== [ 75.924139][T10760] Kernel panic - not syncing: panic_on_warn set ... [ 75.930808][T10760] CPU: 1 PID: 10760 Comm: syz-executor.4 Not tainted 5.9.0-rc4-syzkaller #0 [ 75.939464][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.949685][T10760] Call Trace: [ 75.952975][T10760] dump_stack+0x10f/0x19d [ 75.957283][T10760] panic+0x207/0x64a [ 75.961158][T10760] ? vprintk_emit+0x44a/0x4f0 [ 75.965815][T10760] kcsan_report+0x684/0x690 [ 75.970755][T10760] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 75.976292][T10760] ? io_req_defer+0x3b6/0x550 [ 75.980944][T10760] ? io_queue_sqe+0x21/0x220 [ 75.985553][T10760] ? io_submit_sqe+0x333/0x550 [ 75.990308][T10760] ? io_submit_sqes+0x8c6/0xfb0 [ 75.995146][T10760] ? __se_sys_io_uring_enter+0x1c2/0x720 [ 76.001471][T10760] ? __x64_sys_io_uring_enter+0x74/0x80 [ 76.007164][T10760] ? do_syscall_64+0x39/0x80 [ 76.011846][T10760] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 76.018009][T10760] ? should_fail+0x2a/0x250 [ 76.022502][T10760] kcsan_setup_watchpoint+0x41e/0x4a0 [ 76.027863][T10760] io_req_defer+0x3b6/0x550 [ 76.032357][T10760] io_queue_sqe+0x21/0x220 [ 76.036768][T10760] io_submit_sqe+0x333/0x550 [ 76.041508][T10760] io_submit_sqes+0x8c6/0xfb0 [ 76.046437][T10760] __se_sys_io_uring_enter+0x1c2/0x720 [ 76.051873][T10760] ? debug_smp_processor_id+0x18/0x20 [ 76.057232][T10760] ? perf_trace_sys_enter+0x62/0x2d0 [ 76.063058][T10760] __x64_sys_io_uring_enter+0x74/0x80 [ 76.068806][T10760] do_syscall_64+0x39/0x80 [ 76.073213][T10760] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 76.079092][T10760] RIP: 0033:0x45d5f9 [ 76.082979][T10760] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 76.103204][T10760] RSP: 002b:00007fe1fc2fcc78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 76.112116][T10760] RAX: ffffffffffffffda RBX: 00000000000082c0 RCX: 000000000045d5f9 [ 76.120251][T10760] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000004 [ 76.128199][T10760] RBP: 000000000118cf98 R08: 0000000000000000 R09: 0000000000000000 [ 76.136161][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 76.144316][T10760] R13: 00007ffe21f94a0f R14: 00007fe1fc2fd9c0 R15: 000000000118cf4c [ 76.153560][T10760] Kernel Offset: disabled [ 76.157873][T10760] Rebooting in 86400 seconds..