[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   55.662909][   T27] audit: type=1800 audit(1583792267.147:25): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   55.681750][   T27] audit: type=1800 audit(1583792267.147:26): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   55.717424][   T27] audit: type=1800 audit(1583792267.157:27): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts.
2020/03/09 22:17:55 fuzzer started
2020/03/09 22:17:57 dialing manager at 10.128.0.26:41283
2020/03/09 22:17:57 syscalls: 2999
2020/03/09 22:17:57 code coverage: enabled
2020/03/09 22:17:57 comparison tracing: enabled
2020/03/09 22:17:57 extra coverage: enabled
2020/03/09 22:17:57 setuid sandbox: enabled
2020/03/09 22:17:57 namespace sandbox: enabled
2020/03/09 22:17:57 Android sandbox: /sys/fs/selinux/policy does not exist
2020/03/09 22:17:57 fault injection: enabled
2020/03/09 22:17:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/03/09 22:17:57 net packet injection: enabled
2020/03/09 22:17:57 net device setup: enabled
2020/03/09 22:17:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/03/09 22:17:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
22:19:55 executing program 0:

22:19:55 executing program 1:

syzkaller login: [  183.989956][ T8782] IPVS: ftp: loaded support on port[0] = 21
[  184.122978][ T8784] IPVS: ftp: loaded support on port[0] = 21
[  184.194271][ T8782] chnl_net:caif_netlink_parms(): no params data found
22:19:55 executing program 2:

[  184.385768][ T8784] chnl_net:caif_netlink_parms(): no params data found
[  184.439592][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.448535][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.456642][ T8782] device bridge_slave_0 entered promiscuous mode
22:19:56 executing program 3:

[  184.483316][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.491683][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.501009][ T8782] device bridge_slave_1 entered promiscuous mode
[  184.531245][ T8791] IPVS: ftp: loaded support on port[0] = 21
[  184.635028][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.657173][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.665651][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.675348][ T8784] device bridge_slave_0 entered promiscuous mode
[  184.687689][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.696840][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.704087][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.713552][ T8784] device bridge_slave_1 entered promiscuous mode
[  184.762075][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.785865][ T8782] team0: Port device team_slave_0 added
[  184.805672][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.839278][ T8796] IPVS: ftp: loaded support on port[0] = 21
[  184.841534][ T8784] team0: Port device team_slave_0 added
[  184.871090][ T8782] team0: Port device team_slave_1 added
[  184.887595][ T8784] team0: Port device team_slave_1 added
22:19:56 executing program 4:

[  184.941570][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[  184.957486][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.007357][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.033878][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.058011][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.084555][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.096586][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.104680][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.131297][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.145097][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.152505][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.178905][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
22:19:56 executing program 5:

[  185.291328][ T8784] device hsr_slave_0 entered promiscuous mode
[  185.347745][ T8784] device hsr_slave_1 entered promiscuous mode
[  185.460359][ T8782] device hsr_slave_0 entered promiscuous mode
[  185.527719][ T8782] device hsr_slave_1 entered promiscuous mode
[  185.607462][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.616169][ T8782] Cannot create hsr debugfs directory
[  185.630703][ T8798] IPVS: ftp: loaded support on port[0] = 21
[  185.644982][ T8791] chnl_net:caif_netlink_parms(): no params data found
[  185.657401][ T8801] IPVS: ftp: loaded support on port[0] = 21
[  185.814855][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state
[  185.822187][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.830548][ T8791] device bridge_slave_0 entered promiscuous mode
[  185.840823][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state
[  185.848034][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.855808][ T8791] device bridge_slave_1 entered promiscuous mode
[  185.863988][ T8796] chnl_net:caif_netlink_parms(): no params data found
[  185.936113][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.985290][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.032699][ T8791] team0: Port device team_slave_0 added
[  186.042858][ T8791] team0: Port device team_slave_1 added
[  186.055901][ T8801] chnl_net:caif_netlink_parms(): no params data found
[  186.122883][ T8798] chnl_net:caif_netlink_parms(): no params data found
[  186.132608][ T8782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  186.179977][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.186956][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.212997][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.250204][ T8782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  186.329261][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.336250][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.362423][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.380927][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.388106][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.395881][ T8796] device bridge_slave_0 entered promiscuous mode
[  186.406336][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.413712][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.421512][ T8796] device bridge_slave_1 entered promiscuous mode
[  186.428860][ T8784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  186.480130][ T8784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  186.529271][ T8782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  186.576921][ T8784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  186.627757][ T8782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  186.690707][ T8784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  186.775389][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.852432][ T8791] device hsr_slave_0 entered promiscuous mode
[  186.907905][ T8791] device hsr_slave_1 entered promiscuous mode
[  186.947408][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.955004][ T8791] Cannot create hsr debugfs directory
[  186.962090][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.004074][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.011271][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.019142][ T8798] device bridge_slave_0 entered promiscuous mode
[  187.029428][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.036504][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.044531][ T8798] device bridge_slave_1 entered promiscuous mode
[  187.062696][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.069883][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.077944][ T8801] device bridge_slave_0 entered promiscuous mode
[  187.088170][ T8796] team0: Port device team_slave_0 added
[  187.110689][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.122956][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.132551][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.140749][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.148868][ T8801] device bridge_slave_1 entered promiscuous mode
[  187.156904][ T8796] team0: Port device team_slave_1 added
[  187.208668][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.215661][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.243114][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.256865][ T8798] team0: Port device team_slave_0 added
[  187.266817][ T8798] team0: Port device team_slave_1 added
[  187.285137][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.296396][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.304349][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.330756][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.400603][ T8796] device hsr_slave_0 entered promiscuous mode
[  187.438194][ T8796] device hsr_slave_1 entered promiscuous mode
[  187.477503][ T8796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.485278][ T8796] Cannot create hsr debugfs directory
[  187.492756][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.502825][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.510112][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.536395][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.551127][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.558906][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.585209][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.654826][ T8801] team0: Port device team_slave_0 added
[  187.739375][ T8798] device hsr_slave_0 entered promiscuous mode
[  187.777775][ T8798] device hsr_slave_1 entered promiscuous mode
[  187.817469][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  187.825069][ T8798] Cannot create hsr debugfs directory
[  187.832899][ T8801] team0: Port device team_slave_1 added
[  187.881520][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.888780][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.915005][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.958312][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.965307][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.994259][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.059473][ T8801] device hsr_slave_0 entered promiscuous mode
[  188.087905][ T8801] device hsr_slave_1 entered promiscuous mode
[  188.137486][ T8801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.145062][ T8801] Cannot create hsr debugfs directory
[  188.165997][ T8791] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  188.210039][ T8791] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  188.281396][ T8791] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  188.361583][ T8791] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  188.444406][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.471976][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.549464][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.558544][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.566667][ T8796] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  188.624508][ T8782] 8021q: adding VLAN 0 to HW filter on device team0
[  188.638280][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[  188.645518][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.655002][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.663007][ T8796] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  188.738467][ T8796] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  188.790017][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.799602][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.809209][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.816408][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.833183][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.842380][ T8796] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  188.927368][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.935939][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.944410][ T2780] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.951482][ T2780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.959689][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.970412][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.979136][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.986231][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.993918][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.003794][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.011796][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.021265][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.029813][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.036918][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.061456][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.091837][ T8798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  189.120967][ T8798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  189.169422][ T8798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  189.219338][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.228319][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.237154][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.258943][ T8798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  189.307164][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.316022][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.324612][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  189.342515][ T8801] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  189.403240][ T8784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.414846][ T8784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.443346][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.456022][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.465908][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.474622][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.483072][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  189.491792][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  189.500412][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.509585][ T8801] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  189.573621][ T8801] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  189.634024][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.642348][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.653019][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.660754][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.669017][ T8801] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  189.732364][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.755419][ T8791] 8021q: adding VLAN 0 to HW filter on device team0
[  189.766239][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.775115][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.784256][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  189.794089][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  189.812694][ T8782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.824287][ T8782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.859018][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.868880][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.878746][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.887114][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.896100][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  189.905002][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  189.913871][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  189.921003][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  189.929303][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  189.938256][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  189.946544][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  189.953624][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  189.962646][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.970534][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.986410][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.008478][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.017129][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.026976][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.035980][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.059529][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.134335][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.145979][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.155188][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.164315][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.189503][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.201031][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.212391][ T8791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.224785][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  190.233678][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.245880][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.254802][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.266355][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.275001][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.285466][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.303536][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.332950][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.353166][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.361160][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.369027][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.376687][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.384492][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.392977][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.404127][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.412056][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.421432][ T8798] 8021q: adding VLAN 0 to HW filter on device team0
[  190.431785][ T8796] 8021q: adding VLAN 0 to HW filter on device team0
[  190.446191][ T8784] device veth0_vlan entered promiscuous mode
[  190.458892][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  190.466450][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  190.474373][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.484527][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.499872][ T8801] 8021q: adding VLAN 0 to HW filter on device team0
[  190.506682][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.516310][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.525152][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.532235][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.541714][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.568846][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.586391][ T8784] device veth1_vlan entered promiscuous mode
[  190.609237][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  190.619183][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  190.628473][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  190.636780][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.643892][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.651912][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.662617][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.671462][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.680086][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.687151][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.695139][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.703823][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.712629][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  190.721920][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  190.730717][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.737819][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.745383][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  190.754044][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.762997][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.771468][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.778576][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.810049][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  190.819138][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.827126][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  190.835381][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.844303][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  190.853937][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  190.863167][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  190.871834][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  190.881851][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  190.890664][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  190.938396][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.947223][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.957205][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  190.968230][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  190.976605][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  190.985307][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  190.993884][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.002715][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.011450][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.018547][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.027033][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.036084][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.044824][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.070355][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.078895][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.086585][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.095706][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.104278][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.113197][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.122365][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.131039][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.139383][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.147800][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.159278][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.173650][ T8782] device veth0_vlan entered promiscuous mode
[  191.184301][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.198917][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.206782][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.216272][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.224621][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.233127][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.241802][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.250943][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.259066][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.268143][ T8791] device veth0_vlan entered promiscuous mode
[  191.299436][ T8801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.310209][ T8801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.338866][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.350275][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.359937][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.371834][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.381447][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.391593][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  191.400981][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  191.411072][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  191.420676][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.430347][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  191.442065][ T8784] device veth0_macvtap entered promiscuous mode
[  191.456351][ T8784] device veth1_macvtap entered promiscuous mode
[  191.476945][ T8782] device veth1_vlan entered promiscuous mode
[  191.494651][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.503101][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.512534][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.521805][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.529420][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.536926][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.545077][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.559909][ T8791] device veth1_vlan entered promiscuous mode
[  191.597953][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.606108][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.614659][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  191.623771][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  191.639167][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.671216][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.686533][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.702759][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.713340][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.722305][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.731402][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.740253][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.752264][ T8782] device veth0_macvtap entered promiscuous mode
[  191.763730][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  191.776854][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.802806][ T8782] device veth1_macvtap entered promiscuous mode
[  191.825373][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.834577][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.845546][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.855154][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.864676][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.873577][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.885084][ T8791] device veth0_macvtap entered promiscuous mode
[  191.926711][ T8791] device veth1_macvtap entered promiscuous mode
[  191.953093][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  191.964742][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.976761][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.044186][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.053621][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.063183][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.072498][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.082472][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.099130][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  192.111288][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.124362][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.215046][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.224030][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  192.246792][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.260109][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.270561][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  192.281577][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.293530][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.332709][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.341670][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.358800][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  192.370569][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.381048][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  192.391840][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.405010][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.431660][ T8796] device veth0_vlan entered promiscuous mode
22:20:03 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  192.510187][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.531185][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.543063][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  192.553061][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  192.563089][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  192.572639][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  192.580802][ T8833] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[  192.591316][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.600233][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.634236][ T8796] device veth1_vlan entered promiscuous mode
[  192.709632][ T8836] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[  192.725555][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.733432][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.742726][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  192.751232][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  192.764907][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.817229][ T8798] device veth0_vlan entered promiscuous mode
[  192.881747][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  192.894656][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.903424][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.904262][ T8844] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[  192.911754][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  192.926227][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  192.936677][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  192.945072][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  192.953319][ T8801] device veth0_vlan entered promiscuous mode
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  192.987073][ T8798] device veth1_vlan entered promiscuous mode
22:20:04 executing program 0:
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000280002000800010000000000040004005312020000000000080002000000000008009cd31ced5a3614a6070008000200000000000c000400000000000000000008000100000000000c00030000000000000000000c000400000000000000000008000200000000000c0009"], 0x3}}, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1, 0x0, 0xffffffffffffff49}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  193.120209][ T8850] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  193.183939][ T8801] device veth1_vlan entered promiscuous mode
[  193.215052][ T8798] device veth0_macvtap entered promiscuous mode
[  193.297819][ T8796] device veth0_macvtap entered promiscuous mode
[  193.332530][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
22:20:04 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x402c5342, &(0x7f0000000440)={0x0, 0x4000, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a01]})

[  193.342622][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.359513][ T8865] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[  193.366772][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.376343][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.390160][ T8798] device veth1_macvtap entered promiscuous mode
[  193.401535][ T8867] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  193.414205][ T8867] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  193.457394][ T8867] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'.
[  193.488675][ T8796] device veth1_macvtap entered promiscuous mode
[  193.496378][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.512562][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.540169][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  193.554269][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  193.558792][    C1] hrtimer: interrupt took 48526 ns
22:20:05 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

22:20:05 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  193.644492][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  193.675183][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  193.726667][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.767634][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.778338][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.792061][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.803438][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.814420][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.827073][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.841759][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.855701][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.871356][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.883340][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.898746][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.921270][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.946415][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  193.957605][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  193.969330][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.982166][ T8801] device veth0_macvtap entered promiscuous mode
[  193.992882][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  194.002350][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.011405][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.020850][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.030923][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.043413][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.055325][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.067221][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.079637][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.089632][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.100277][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.113270][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.130192][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.141600][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.153973][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.165709][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.175676][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.186132][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.196098][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.206761][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.219849][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.227612][ T8892] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  194.235891][ T8892] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  194.247517][ T8892] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'.
[  194.257155][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  194.266177][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.276879][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  194.285872][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.317132][ T8801] device veth1_macvtap entered promiscuous mode
[  194.433851][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.444963][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.455302][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.465827][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.476015][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.487175][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.498371][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.509618][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.519630][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  194.530519][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.542427][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.649091][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  194.660810][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  194.674359][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.685457][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.695823][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.706375][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.717385][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.731483][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.741535][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.751994][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.761865][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  194.772338][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  194.783758][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.850241][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  194.862275][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.969226][    T0] NOHZ: local_softirq_pending 08
22:20:06 executing program 3:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

22:20:06 executing program 4:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

22:20:06 executing program 5:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

22:20:06 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:06 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

22:20:06 executing program 0:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

22:20:06 executing program 1:
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:07 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9})

22:20:07 executing program 0:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x301}, 0x14}}, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)

22:20:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00')
r1 = gettid()
tkill(r1, 0x40020000000c)
writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000180)="43d30d226d2873b23fec12fb44753e8ebc4ed989780143206c638452fec8a742bab95d2b5393b910a8e82fc93383e0dc626710183d6f48f21bfb3e7cd95b994433c8b0a230f42a6140a2bca5c4bb2153c3134306ba4295c26854d6fa255a21f70db1833f7f87375b421c623355f3a072cc8544d2cfcba9cc274183899ad02ba43b5609a339187769b8d16e2c6b80456a54b015060a02", 0x96}], 0x1)

22:20:07 executing program 1:
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:07 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])

22:20:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x21, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)

22:20:07 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))

[  195.901806][ T8943]  loop5: p1 p2 p3 p4
[  195.907015][ T8943] loop5: p1 size 11290111 extends beyond EOD, truncated
[  195.925641][ T8943] loop5: p2 size 1073741824 extends beyond EOD, truncated
[  195.940532][ T8943] loop5: p3 size 1912633224 extends beyond EOD, truncated
[  195.963646][ T8943] loop5: p4 size 3657465856 extends beyond EOD, truncated
22:20:07 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])

22:20:07 executing program 0:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1})
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(r0)

22:20:07 executing program 1:
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xa}, {0x8}}}]}}]}, 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c5)
read$FUSE(r0, &(0x7f0000000380), 0x1000)

[  196.183002][ T8965]  loop5: p1 p2 p3 p4
[  196.187909][ T8965] loop5: p1 size 11290111 extends beyond EOD, truncated
[  196.208850][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.224579][ T8965] loop5: p2 size 1073741824 extends beyond EOD, truncated
[  196.283629][ T8965] loop5: p3 size 1912633224 extends beyond EOD, truncated
[  196.308869][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
22:20:07 executing program 0:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1})
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(r0)

[  196.338954][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.346126][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.362455][ T8965] loop5: p4 size 3657465856 extends beyond EOD, truncated
[  196.653043][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.682032][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.689238][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state
22:20:08 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9})

22:20:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xa}, {0x8}}}]}}]}, 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c5)
read$FUSE(r0, &(0x7f0000000380), 0x1000)

22:20:08 executing program 2:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="090ef28b00", @dev, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0)

22:20:08 executing program 1:
creat(0x0, 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:08 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])

22:20:08 executing program 0:
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="0000000000000075073a0000000f000000280002000800010000000000040004005312020000000000080002000000000008009cd31ced5a3614a6070008000200000000000c000400000000000000000008000100000000000c00030000000000000000000c0004"], 0x3}}, 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1, 0x0, 0xffffffffffffff49}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

22:20:08 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)}, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x40000, 0x0)
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {r1, 0x2000}], 0x2, &(0x7f00000001c0), &(0x7f0000000240), 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x0)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000003c0)=0xb5e, 0x4)
listen(r2, 0x100000001)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb)
recvmmsg(r4, &(0x7f0000004300), 0x3a4, 0x0, 0x0)

22:20:08 executing program 1:
creat(0x0, 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  196.959367][ T9003]  loop5: p1 p2 p3 p4
[  196.964114][ T9003] loop5: p1 size 11290111 extends beyond EOD, truncated
[  197.016081][ T9003] loop5: p2 size 1073741824 extends beyond EOD, truncated
[  197.024935][ T9003] loop5: p3 size 1912633224 extends beyond EOD, truncated
[  197.033900][ T9003] loop5: p4 size 3657465856 extends beyond EOD, truncated
22:20:08 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x24, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)

22:20:08 executing program 1:
creat(0x0, 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:08 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)

[  197.379861][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state
22:20:08 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])

[  197.631702][ T9018] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  197.667685][ T9018] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  197.681874][ T9056]  loop5: p1 p2 p3 p4
[  197.686878][ T9056] loop5: p1 size 11290111 extends beyond EOD, truncated
[  197.707892][ T9018] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'.
[  197.730449][ T9061] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[  197.737637][ T9056] loop5: p2 size 1073741824 extends beyond EOD, truncated
[  197.745060][ T9061] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  197.754961][ T9061] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'.
[  197.763730][ T9056] loop5: p3 size 1912633224 extends beyond EOD, truncated
22:20:09 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9})

22:20:09 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

22:20:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000002c0))

22:20:09 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa4d67268366c0a4a, &(0x7f0000000100)=0x3, 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xf6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)

22:20:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x400000000000000}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xf6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)

[  197.777415][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  197.786010][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.793161][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.836607][ T9056] loop5: p4 size 3657465856 extends beyond EOD, truncated
22:20:09 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})

[  198.048872][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.062529][ T9074] ------------[ cut here ]------------
[  198.099411][ T9074] refcount_t: underflow; use-after-free.
[  198.157361][ T9074] WARNING: CPU: 0 PID: 9074 at lib/refcount.c:28 refcount_warn_saturate+0x15b/0x1a0
[  198.166766][ T9074] Kernel panic - not syncing: panic_on_warn set ...
[  198.173360][ T9074] CPU: 0 PID: 9074 Comm: syz-executor.0 Not tainted 5.6.0-rc5-syzkaller #0
[  198.181946][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  198.192008][ T9074] Call Trace:
[  198.195314][ T9074]  dump_stack+0x1e9/0x30e
[  198.199651][ T9074]  panic+0x264/0x7a0
[  198.203546][ T9074]  ? __warn+0x102/0x210
[  198.207712][ T9074]  ? refcount_warn_saturate+0x15b/0x1a0
[  198.213262][ T9074]  __warn+0x209/0x210
[  198.217246][ T9074]  ? refcount_warn_saturate+0x15b/0x1a0
[  198.222794][ T9074]  report_bug+0x1ac/0x2d0
[  198.227125][ T9074]  do_error_trap+0xca/0x1c0
[  198.231623][ T9074]  do_invalid_op+0x32/0x40
[  198.236020][ T9074]  ? refcount_warn_saturate+0x15b/0x1a0
[  198.241651][ T9074]  invalid_op+0x23/0x30
[  198.245842][ T9074] RIP: 0010:refcount_warn_saturate+0x15b/0x1a0
[  198.252021][ T9074] Code: c7 e4 ff d0 88 31 c0 e8 23 20 b3 fd 0f 0b eb 85 e8 8a 4a e0 fd c6 05 ff 70 b1 05 01 48 c7 c7 10 00 d1 88 31 c0 e8 05 20 b3 fd <0f> 0b e9 64 ff ff ff e8 69 4a e0 fd c6 05 df 70 b1 05 01 48 c7 c7
[  198.271613][ T9074] RSP: 0018:ffffc900056e78e0 EFLAGS: 00010246
[  198.277665][ T9074] RAX: d9e463d085c89800 RBX: 0000000000000003 RCX: ffff888049496600
[  198.285632][ T9074] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  198.293629][ T9074] RBP: 0000000000000003 R08: ffffffff815e16e6 R09: ffffed1015d06618
[  198.301591][ T9074] R10: ffffed1015d06618 R11: 0000000000000000 R12: dffffc0000000000
[  198.309550][ T9074] R13: ffff8880497c8000 R14: ffff888096a01040 R15: 1ffff11014627038
[  198.317527][ T9074]  ? vprintk_emit+0x2e6/0x3b0
[  198.322212][ T9074]  sctp_wfree+0x3b1/0x710
[  198.326556][ T9074]  skb_release_head_state+0xfb/0x210
[  198.331857][ T9074]  __kfree_skb+0x22/0x1c0
[  198.336210][ T9074]  sctp_chunk_put+0x17b/0x200
[  198.340928][ T9074]  __sctp_outq_teardown+0x80a/0x9d0
[  198.346246][ T9074]  sctp_association_free+0x21e/0x7c0
[  198.352497][ T9074]  ? sctp_do_sm+0x2e2a/0x5560
[  198.357185][ T9074]  sctp_do_sm+0x3c01/0x5560
[  198.361703][ T9074]  ? rcu_read_lock_sched_held+0x106/0x170
[  198.367447][ T9074]  ? _sctp_make_chunk+0x10c/0x3e0
[  198.372477][ T9074]  ? rcu_read_lock_sched_held+0x106/0x170
[  198.378206][ T9074]  ? trace_kmem_cache_alloc+0xcb/0x120
[  198.383679][ T9074]  ? _sctp_make_chunk+0x10c/0x3e0
[  198.388732][ T9074]  ? sctp_auth_send_cid+0x60/0x250
[  198.393878][ T9074]  sctp_primitive_ABORT+0x93/0xc0
[  198.398922][ T9074]  sctp_close+0x231/0x770
[  198.403269][ T9074]  ? ip_mc_drop_socket+0x267/0x280
22:20:09 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa4d67268366c0a4a, &(0x7f0000000100)=0x3, 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xf6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)

[  198.408400][ T9074]  inet_release+0x135/0x180
[  198.413347][ T9074]  sock_close+0xd8/0x260
[  198.417594][ T9074]  ? sock_mmap+0x90/0x90
[  198.421949][ T9074]  __fput+0x2d8/0x730
[  198.425975][ T9074]  task_work_run+0x176/0x1b0
[  198.430569][ T9074]  prepare_exit_to_usermode+0x48e/0x600
[  198.436109][ T9074]  ? syscall_return_slowpath+0xf9/0x420
[  198.441786][ T9074]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  198.447665][ T9074] RIP: 0033:0x416041
[  198.451543][ T9074] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  198.471134][ T9074] RSP: 002b:00007ffc42814b40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  198.479526][ T9074] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416041
[  198.487479][ T9074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[  198.495466][ T9074] RBP: 0000000000000001 R08: 0000000009d56064 R09: 0000000009d56068
[  198.504377][ T9074] R10: 00007ffc42814c20 R11: 0000000000000293 R12: 000000000076bf20
[  198.512341][ T9074] R13: 0000000000771510 R14: 00000000000305a6 R15: 000000000076bf2c
[  198.521905][ T9074] Kernel Offset: disabled
[  198.526335][ T9074] Rebooting in 86400 seconds..