[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[ 55.662909][ T27] audit: type=1800 audit(1583792267.147:25): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[ 55.681750][ T27] audit: type=1800 audit(1583792267.147:26): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[ 55.717424][ T27] audit: type=1800 audit(1583792267.157:27): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c.
Debian GNU/Linux 7 syzkaller ttyS0
Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts.
2020/03/09 22:17:55 fuzzer started
2020/03/09 22:17:57 dialing manager at 10.128.0.26:41283
2020/03/09 22:17:57 syscalls: 2999
2020/03/09 22:17:57 code coverage: enabled
2020/03/09 22:17:57 comparison tracing: enabled
2020/03/09 22:17:57 extra coverage: enabled
2020/03/09 22:17:57 setuid sandbox: enabled
2020/03/09 22:17:57 namespace sandbox: enabled
2020/03/09 22:17:57 Android sandbox: /sys/fs/selinux/policy does not exist
2020/03/09 22:17:57 fault injection: enabled
2020/03/09 22:17:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2020/03/09 22:17:57 net packet injection: enabled
2020/03/09 22:17:57 net device setup: enabled
2020/03/09 22:17:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2020/03/09 22:17:57 devlink PCI setup: PCI device 0000:00:10.0 is not available
22:19:55 executing program 0:
22:19:55 executing program 1:
syzkaller login: [ 183.989956][ T8782] IPVS: ftp: loaded support on port[0] = 21
[ 184.122978][ T8784] IPVS: ftp: loaded support on port[0] = 21
[ 184.194271][ T8782] chnl_net:caif_netlink_parms(): no params data found
22:19:55 executing program 2:
[ 184.385768][ T8784] chnl_net:caif_netlink_parms(): no params data found
[ 184.439592][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state
[ 184.448535][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state
[ 184.456642][ T8782] device bridge_slave_0 entered promiscuous mode
22:19:56 executing program 3:
[ 184.483316][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state
[ 184.491683][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state
[ 184.501009][ T8782] device bridge_slave_1 entered promiscuous mode
[ 184.531245][ T8791] IPVS: ftp: loaded support on port[0] = 21
[ 184.635028][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 184.657173][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 184.665651][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state
[ 184.675348][ T8784] device bridge_slave_0 entered promiscuous mode
[ 184.687689][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 184.696840][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 184.704087][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state
[ 184.713552][ T8784] device bridge_slave_1 entered promiscuous mode
[ 184.762075][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 184.785865][ T8782] team0: Port device team_slave_0 added
[ 184.805672][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 184.839278][ T8796] IPVS: ftp: loaded support on port[0] = 21
[ 184.841534][ T8784] team0: Port device team_slave_0 added
[ 184.871090][ T8782] team0: Port device team_slave_1 added
[ 184.887595][ T8784] team0: Port device team_slave_1 added
22:19:56 executing program 4:
[ 184.941570][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 184.957486][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 185.007357][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 185.033878][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 185.058011][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 185.084555][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 185.096586][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 185.104680][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 185.131297][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 185.145097][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 185.152505][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 185.178905][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
22:19:56 executing program 5:
[ 185.291328][ T8784] device hsr_slave_0 entered promiscuous mode
[ 185.347745][ T8784] device hsr_slave_1 entered promiscuous mode
[ 185.460359][ T8782] device hsr_slave_0 entered promiscuous mode
[ 185.527719][ T8782] device hsr_slave_1 entered promiscuous mode
[ 185.607462][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 185.616169][ T8782] Cannot create hsr debugfs directory
[ 185.630703][ T8798] IPVS: ftp: loaded support on port[0] = 21
[ 185.644982][ T8791] chnl_net:caif_netlink_parms(): no params data found
[ 185.657401][ T8801] IPVS: ftp: loaded support on port[0] = 21
[ 185.814855][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state
[ 185.822187][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state
[ 185.830548][ T8791] device bridge_slave_0 entered promiscuous mode
[ 185.840823][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state
[ 185.848034][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state
[ 185.855808][ T8791] device bridge_slave_1 entered promiscuous mode
[ 185.863988][ T8796] chnl_net:caif_netlink_parms(): no params data found
[ 185.936113][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 185.985290][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 186.032699][ T8791] team0: Port device team_slave_0 added
[ 186.042858][ T8791] team0: Port device team_slave_1 added
[ 186.055901][ T8801] chnl_net:caif_netlink_parms(): no params data found
[ 186.122883][ T8798] chnl_net:caif_netlink_parms(): no params data found
[ 186.132608][ T8782] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 186.179977][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 186.186956][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 186.212997][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 186.250204][ T8782] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 186.329261][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 186.336250][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 186.362423][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 186.380927][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state
[ 186.388106][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state
[ 186.395881][ T8796] device bridge_slave_0 entered promiscuous mode
[ 186.406336][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state
[ 186.413712][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state
[ 186.421512][ T8796] device bridge_slave_1 entered promiscuous mode
[ 186.428860][ T8784] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 186.480130][ T8784] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 186.529271][ T8782] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 186.576921][ T8784] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 186.627757][ T8782] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 186.690707][ T8784] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 186.775389][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 186.852432][ T8791] device hsr_slave_0 entered promiscuous mode
[ 186.907905][ T8791] device hsr_slave_1 entered promiscuous mode
[ 186.947408][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 186.955004][ T8791] Cannot create hsr debugfs directory
[ 186.962090][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 187.004074][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state
[ 187.011271][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state
[ 187.019142][ T8798] device bridge_slave_0 entered promiscuous mode
[ 187.029428][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state
[ 187.036504][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state
[ 187.044531][ T8798] device bridge_slave_1 entered promiscuous mode
[ 187.062696][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state
[ 187.069883][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state
[ 187.077944][ T8801] device bridge_slave_0 entered promiscuous mode
[ 187.088170][ T8796] team0: Port device team_slave_0 added
[ 187.110689][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 187.122956][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 187.132551][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state
[ 187.140749][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state
[ 187.148868][ T8801] device bridge_slave_1 entered promiscuous mode
[ 187.156904][ T8796] team0: Port device team_slave_1 added
[ 187.208668][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 187.215661][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 187.243114][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 187.256865][ T8798] team0: Port device team_slave_0 added
[ 187.266817][ T8798] team0: Port device team_slave_1 added
[ 187.285137][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 187.296396][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 187.304349][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 187.330756][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 187.400603][ T8796] device hsr_slave_0 entered promiscuous mode
[ 187.438194][ T8796] device hsr_slave_1 entered promiscuous mode
[ 187.477503][ T8796] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 187.485278][ T8796] Cannot create hsr debugfs directory
[ 187.492756][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 187.502825][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 187.510112][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 187.536395][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 187.551127][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 187.558906][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 187.585209][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 187.654826][ T8801] team0: Port device team_slave_0 added
[ 187.739375][ T8798] device hsr_slave_0 entered promiscuous mode
[ 187.777775][ T8798] device hsr_slave_1 entered promiscuous mode
[ 187.817469][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 187.825069][ T8798] Cannot create hsr debugfs directory
[ 187.832899][ T8801] team0: Port device team_slave_1 added
[ 187.881520][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 187.888780][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 187.915005][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 187.958312][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 187.965307][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 187.994259][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 188.059473][ T8801] device hsr_slave_0 entered promiscuous mode
[ 188.087905][ T8801] device hsr_slave_1 entered promiscuous mode
[ 188.137486][ T8801] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 188.145062][ T8801] Cannot create hsr debugfs directory
[ 188.165997][ T8791] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 188.210039][ T8791] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 188.281396][ T8791] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 188.361583][ T8791] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 188.444406][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0
[ 188.471976][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0
[ 188.549464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 188.558544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 188.566667][ T8796] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 188.624508][ T8782] 8021q: adding VLAN 0 to HW filter on device team0
[ 188.638280][ T8784] 8021q: adding VLAN 0 to HW filter on device team0
[ 188.645518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 188.655002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 188.663007][ T8796] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 188.738467][ T8796] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 188.790017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 188.799602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 188.809209][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 188.816408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 188.833183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 188.842380][ T8796] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 188.927368][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 188.935939][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 188.944410][ T2780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 188.951482][ T2780] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 188.959689][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 188.970412][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 188.979136][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 188.986231][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 188.993918][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 189.003794][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 189.011796][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 189.021265][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 189.029813][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 189.036918][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 189.061456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 189.091837][ T8798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 189.120967][ T8798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 189.169422][ T8798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 189.219338][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 189.228319][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 189.237154][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 189.258943][ T8798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 189.307164][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 189.316022][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 189.324612][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 189.342515][ T8801] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 189.403240][ T8784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 189.414846][ T8784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 189.443346][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 189.456022][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 189.465908][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 189.474622][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 189.483072][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 189.491792][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 189.500412][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 189.509585][ T8801] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 189.573621][ T8801] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 189.634024][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 189.642348][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 189.653019][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 189.660754][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 189.669017][ T8801] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 189.732364][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0
[ 189.755419][ T8791] 8021q: adding VLAN 0 to HW filter on device team0
[ 189.766239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 189.775115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 189.784256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 189.794089][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 189.812694][ T8782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 189.824287][ T8782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 189.859018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 189.868880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 189.878746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 189.887114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 189.896100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 189.905002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 189.913871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 189.921003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 189.929303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 189.938256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 189.946544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 189.953624][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 189.962646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 189.970534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 189.986410][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 190.008478][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 190.017129][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 190.026976][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 190.035980][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 190.059529][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 190.134335][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 190.145979][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 190.155188][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 190.164315][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 190.189503][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0
[ 190.201031][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0
[ 190.212391][ T8791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 190.224785][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 190.233678][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 190.245880][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 190.254802][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 190.266355][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 190.275001][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 190.285466][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 190.303536][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0
[ 190.332950][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 190.353166][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 190.361160][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 190.369027][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 190.376687][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 190.384492][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 190.392977][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 190.404127][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 190.412056][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 190.421432][ T8798] 8021q: adding VLAN 0 to HW filter on device team0
[ 190.431785][ T8796] 8021q: adding VLAN 0 to HW filter on device team0
[ 190.446191][ T8784] device veth0_vlan entered promiscuous mode
[ 190.458892][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 190.466450][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 190.474373][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 190.484527][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 190.499872][ T8801] 8021q: adding VLAN 0 to HW filter on device team0
[ 190.506682][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 190.516310][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 190.525152][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 190.532235][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 190.541714][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 190.568846][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 190.586391][ T8784] device veth1_vlan entered promiscuous mode
[ 190.609237][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 190.619183][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 190.628473][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 190.636780][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state
[ 190.643892][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 190.651912][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 190.662617][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 190.671462][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 190.680086][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 190.687151][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 190.695139][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 190.703823][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 190.712629][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 190.721920][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 190.730717][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state
[ 190.737819][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 190.745383][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 190.754044][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 190.762997][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 190.771468][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 190.778576][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 190.810049][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 190.819138][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 190.827126][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 190.835381][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 190.844303][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 190.853937][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 190.863167][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 190.871834][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 190.881851][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 190.890664][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 190.938396][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 190.947223][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 190.957205][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 190.968230][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 190.976605][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 190.985307][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 190.993884][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 191.002715][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 191.011450][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 191.018547][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 191.027033][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 191.036084][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 191.044824][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 191.070355][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 191.078895][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 191.086585][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 191.095706][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 191.104278][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 191.113197][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 191.122365][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 191.131039][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 191.139383][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 191.147800][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 191.159278][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 191.173650][ T8782] device veth0_vlan entered promiscuous mode
[ 191.184301][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 191.198917][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 191.206782][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 191.216272][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 191.224621][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 191.233127][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 191.241802][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 191.250943][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 191.259066][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 191.268143][ T8791] device veth0_vlan entered promiscuous mode
[ 191.299436][ T8801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 191.310209][ T8801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 191.338866][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 191.350275][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 191.359937][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 191.371834][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 191.381447][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 191.391593][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 191.400981][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 191.411072][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 191.420676][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 191.430347][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 191.442065][ T8784] device veth0_macvtap entered promiscuous mode
[ 191.456351][ T8784] device veth1_macvtap entered promiscuous mode
[ 191.476945][ T8782] device veth1_vlan entered promiscuous mode
[ 191.494651][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 191.503101][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 191.512534][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 191.521805][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 191.529420][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 191.536926][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 191.545077][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 191.559909][ T8791] device veth1_vlan entered promiscuous mode
[ 191.597953][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 191.606108][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 191.614659][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 191.623771][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 191.639167][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 191.671216][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 191.686533][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 191.702759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 191.713340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 191.722305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 191.731402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 191.740253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 191.752264][ T8782] device veth0_macvtap entered promiscuous mode
[ 191.763730][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 191.776854][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 191.802806][ T8782] device veth1_macvtap entered promiscuous mode
[ 191.825373][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 191.834577][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 191.845546][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 191.855154][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 191.864676][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 191.873577][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 191.885084][ T8791] device veth0_macvtap entered promiscuous mode
[ 191.926711][ T8791] device veth1_macvtap entered promiscuous mode
[ 191.953093][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 191.964742][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 191.976761][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 192.044186][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 192.053621][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 192.063183][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 192.072498][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 192.082472][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 192.099130][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 192.111288][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 192.124362][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 192.215046][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 192.224030][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 192.246792][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 192.260109][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 192.270561][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 192.281577][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 192.293530][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 192.332709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 192.341670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 192.358800][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 192.370569][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 192.381048][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 192.391840][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 192.405010][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 192.431660][ T8796] device veth0_vlan entered promiscuous mode
22:20:03 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 192.510187][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 192.531185][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 192.543063][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 192.553061][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 192.563089][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 192.572639][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 192.580802][ T8833] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[ 192.591316][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 192.600233][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 192.634236][ T8796] device veth1_vlan entered promiscuous mode
[ 192.709632][ T8836] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[ 192.725555][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 192.733432][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 192.742726][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 192.751232][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 192.764907][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 192.817229][ T8798] device veth0_vlan entered promiscuous mode
[ 192.881747][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 192.894656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 192.903424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 192.904262][ T8844] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[ 192.911754][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 192.926227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 192.936677][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 192.945072][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 192.953319][ T8801] device veth0_vlan entered promiscuous mode
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 192.987073][ T8798] device veth1_vlan entered promiscuous mode
22:20:04 executing program 0:
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000280002000800010000000000040004005312020000000000080002000000000008009cd31ced5a3614a6070008000200000000000c000400000000000000000008000100000000000c00030000000000000000000c000400000000000000000008000200000000000c0009"], 0x3}}, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1, 0x0, 0xffffffffffffff49}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
[ 193.120209][ T8850] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 193.183939][ T8801] device veth1_vlan entered promiscuous mode
[ 193.215052][ T8798] device veth0_macvtap entered promiscuous mode
[ 193.297819][ T8796] device veth0_macvtap entered promiscuous mode
[ 193.332530][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
22:20:04 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0)
r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x402c5342, &(0x7f0000000440)={0x0, 0x4000, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a01]})
[ 193.342622][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 193.359513][ T8865] EXT4-fs (sda1): re-mounted. Opts: grpjquota=,
[ 193.366772][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 193.376343][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 193.390160][ T8798] device veth1_macvtap entered promiscuous mode
[ 193.401535][ T8867] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[ 193.414205][ T8867] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
22:20:04 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 193.457394][ T8867] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 193.488675][ T8796] device veth1_macvtap entered promiscuous mode
[ 193.496378][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 193.512562][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 193.540169][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 193.554269][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 193.558792][ C1] hrtimer: interrupt took 48526 ns
22:20:05 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
22:20:05 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 193.644492][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 193.675183][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 193.726667][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.767634][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.778338][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.792061][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.803438][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.814420][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.827073][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 193.841759][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.855701][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.871356][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.883340][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.898746][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.921270][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.946415][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 193.957605][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 193.969330][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 193.982166][ T8801] device veth0_macvtap entered promiscuous mode
[ 193.992882][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 194.002350][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 194.011405][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 194.020850][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 194.030923][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 194.043413][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.055325][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.067221][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.079637][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.089632][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.100277][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.113270][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 194.130192][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.141600][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.153973][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.165709][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.175676][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.186132][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.196098][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.206761][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.219849][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 194.227612][ T8892] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[ 194.235891][ T8892] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[ 194.247517][ T8892] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 194.257155][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 194.266177][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 194.276879][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 194.285872][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 194.317132][ T8801] device veth1_macvtap entered promiscuous mode
[ 194.433851][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 194.444963][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.455302][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 194.465827][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.476015][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 194.487175][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.498371][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 194.509618][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.519630][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[ 194.530519][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.542427][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 194.649091][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 194.660810][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 194.674359][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.685457][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.695823][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.706375][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.717385][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.731483][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.741535][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.751994][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.761865][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[ 194.772338][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 194.783758][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 194.850241][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 194.862275][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 194.969226][ T0] NOHZ: local_softirq_pending 08
22:20:06 executing program 3:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000000000000200000007000200c0feffff010400000700000000e2ffff0c000000dde60000340f00004e0b0000060000000000000008000080000001001c5b00007f0000001f0000000000000008000080020000000004000002000000643100000000000000000000a80c000000000100018000af400000010001800000a1709260489bdfdc18d8c1000800000200000000000000009b83f9ed000000fd000000265f00c0cf000000000000000000000035252fa6e4af9a0990da7becc32329f1920c998565748c5c4a0cf6592f9566fce196a3cd338d67fa0a2091897d9a9fbdb8b908187521b127a69b0a9f29aa01779ab787695280cf07bdef4e34aa2743e91bc22232de37ed1fb07eed85773502ca088439face625f6e7c7eb1"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
22:20:06 executing program 4:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
22:20:06 executing program 5:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
22:20:06 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:06 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
22:20:06 executing program 0:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000000000000200000007000200c0feffff010400000700000000e2ffff0c000000dde60000340f00004e0b0000060000000000000008000080000001001c5b00007f0000001f0000000000000008000080020000000004000002000000643100000000000000000000a80c000000000100018000af400000010001800000a1709260489bdfdc18d8c1000800000200000000000000009b83f9ed000000fd000000265f00c0cf000000000000000000000035252fa6e4af9a0990da7becc32329f1920c998565748c5c4a0cf6592f9566fce196a3cd338d67fa0a2091897d9a9fbdb8b908187521b127a69b0a9f29aa01779ab787695280cf07bdef4e34aa2743e91bc22232de37ed1fb07eed85773502ca088439face625f6e7c7eb1"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
22:20:06 executing program 1:
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:07 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9})
22:20:07 executing program 0:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x301}, 0x14}}, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
22:20:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00')
r1 = gettid()
tkill(r1, 0x40020000000c)
writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000180)="43d30d226d2873b23fec12fb44753e8ebc4ed989780143206c638452fec8a742bab95d2b5393b910a8e82fc93383e0dc626710183d6f48f21bfb3e7cd95b994433c8b0a230f42a6140a2bca5c4bb2153c3134306ba4295c26854d6fa255a21f70db1833f7f87375b421c623355f3a072cc8544d2cfcba9cc274183899ad02ba43b5609a339187769b8d16e2c6b80456a54b015060a02", 0x96}], 0x1)
22:20:07 executing program 1:
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:07 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])
22:20:07 executing program 3:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x21, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
22:20:07 executing program 2:
syz_open_procfs(0xffffffffffffffff, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4)
gettid()
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = dup2(r1, r0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0})
wait4(0x0, 0x0, 0x80000000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = dup2(r3, r3)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0)
ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240))
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = dup2(r6, r5)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10)
ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"])
getpid()
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0))
[ 195.901806][ T8943] loop5: p1 p2 p3 p4
[ 195.907015][ T8943] loop5: p1 size 11290111 extends beyond EOD, truncated
[ 195.925641][ T8943] loop5: p2 size 1073741824 extends beyond EOD, truncated
[ 195.940532][ T8943] loop5: p3 size 1912633224 extends beyond EOD, truncated
[ 195.963646][ T8943] loop5: p4 size 3657465856 extends beyond EOD, truncated
22:20:07 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])
22:20:07 executing program 0:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1})
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(r0)
22:20:07 executing program 1:
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:07 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xa}, {0x8}}}]}}]}, 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c5)
read$FUSE(r0, &(0x7f0000000380), 0x1000)
[ 196.183002][ T8965] loop5: p1 p2 p3 p4
[ 196.187909][ T8965] loop5: p1 size 11290111 extends beyond EOD, truncated
[ 196.208850][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[ 196.224579][ T8965] loop5: p2 size 1073741824 extends beyond EOD, truncated
[ 196.283629][ T8965] loop5: p3 size 1912633224 extends beyond EOD, truncated
[ 196.308869][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
22:20:07 executing program 0:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
r1 = gettid()
fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1})
fcntl$setlease(r0, 0x400, 0x1)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
close(r0)
[ 196.338954][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state
[ 196.346126][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 196.362455][ T8965] loop5: p4 size 3657465856 extends beyond EOD, truncated
[ 196.653043][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state
[ 196.682032][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state
[ 196.689238][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state
22:20:08 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9})
22:20:08 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xa}, {0x8}}}]}}]}, 0x58}}, 0x0)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c5)
read$FUSE(r0, &(0x7f0000000380), 0x1000)
22:20:08 executing program 2:
perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="090ef28b00", @dev, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0)
22:20:08 executing program 1:
creat(0x0, 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:08 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])
22:20:08 executing program 0:
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="0000000000000075073a0000000f000000280002000800010000000000040004005312020000000000080002000000000008009cd31ced5a3614a6070008000200000000000c000400000000000000000008000100000000000c00030000000000000000000c0004"], 0x3}}, 0x0)
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1, 0x0, 0xffffffffffffff49}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
22:20:08 executing program 3:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)}, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x40000, 0x0)
ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {r1, 0x2000}], 0x2, &(0x7f00000001c0), &(0x7f0000000240), 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
r3 = socket$inet(0x10, 0x3, 0x0)
sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x0)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000003c0)=0xb5e, 0x4)
listen(r2, 0x100000001)
r4 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb)
recvmmsg(r4, &(0x7f0000004300), 0x3a4, 0x0, 0x0)
22:20:08 executing program 1:
creat(0x0, 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 196.959367][ T9003] loop5: p1 p2 p3 p4
[ 196.964114][ T9003] loop5: p1 size 11290111 extends beyond EOD, truncated
[ 197.016081][ T9003] loop5: p2 size 1073741824 extends beyond EOD, truncated
[ 197.024935][ T9003] loop5: p3 size 1912633224 extends beyond EOD, truncated
[ 197.033900][ T9003] loop5: p4 size 3657465856 extends beyond EOD, truncated
22:20:08 executing program 2:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x24, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000)
22:20:08 executing program 1:
creat(0x0, 0x0)
mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:08 executing program 2:
syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0)
[ 197.379861][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state
22:20:08 executing program 5:
write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb)
syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}])
[ 197.631702][ T9018] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[ 197.667685][ T9018] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[ 197.681874][ T9056] loop5: p1 p2 p3 p4
[ 197.686878][ T9056] loop5: p1 size 11290111 extends beyond EOD, truncated
[ 197.707892][ T9018] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 197.730449][ T9061] netlink: 'syz-executor.0': attribute type 7 has an invalid length.
[ 197.737637][ T9056] loop5: p2 size 1073741824 extends beyond EOD, truncated
[ 197.745060][ T9061] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[ 197.754961][ T9061] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 197.763730][ T9056] loop5: p3 size 1912633224 extends beyond EOD, truncated
22:20:09 executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9})
22:20:09 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
22:20:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000002c0))
22:20:09 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa4d67268366c0a4a, &(0x7f0000000100)=0x3, 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xf6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
22:20:09 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x400000000000000}, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xf6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
[ 197.777415][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 197.786010][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 197.793161][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 197.836607][ T9056] loop5: p4 size 3657465856 extends beyond EOD, truncated
22:20:09 executing program 1:
creat(&(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0)
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]})
[ 198.048872][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state
[ 198.062529][ T9074] ------------[ cut here ]------------
[ 198.099411][ T9074] refcount_t: underflow; use-after-free.
[ 198.157361][ T9074] WARNING: CPU: 0 PID: 9074 at lib/refcount.c:28 refcount_warn_saturate+0x15b/0x1a0
[ 198.166766][ T9074] Kernel panic - not syncing: panic_on_warn set ...
[ 198.173360][ T9074] CPU: 0 PID: 9074 Comm: syz-executor.0 Not tainted 5.6.0-rc5-syzkaller #0
[ 198.181946][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 198.192008][ T9074] Call Trace:
[ 198.195314][ T9074] dump_stack+0x1e9/0x30e
[ 198.199651][ T9074] panic+0x264/0x7a0
[ 198.203546][ T9074] ? __warn+0x102/0x210
[ 198.207712][ T9074] ? refcount_warn_saturate+0x15b/0x1a0
[ 198.213262][ T9074] __warn+0x209/0x210
[ 198.217246][ T9074] ? refcount_warn_saturate+0x15b/0x1a0
[ 198.222794][ T9074] report_bug+0x1ac/0x2d0
[ 198.227125][ T9074] do_error_trap+0xca/0x1c0
[ 198.231623][ T9074] do_invalid_op+0x32/0x40
[ 198.236020][ T9074] ? refcount_warn_saturate+0x15b/0x1a0
[ 198.241651][ T9074] invalid_op+0x23/0x30
[ 198.245842][ T9074] RIP: 0010:refcount_warn_saturate+0x15b/0x1a0
[ 198.252021][ T9074] Code: c7 e4 ff d0 88 31 c0 e8 23 20 b3 fd 0f 0b eb 85 e8 8a 4a e0 fd c6 05 ff 70 b1 05 01 48 c7 c7 10 00 d1 88 31 c0 e8 05 20 b3 fd <0f> 0b e9 64 ff ff ff e8 69 4a e0 fd c6 05 df 70 b1 05 01 48 c7 c7
[ 198.271613][ T9074] RSP: 0018:ffffc900056e78e0 EFLAGS: 00010246
[ 198.277665][ T9074] RAX: d9e463d085c89800 RBX: 0000000000000003 RCX: ffff888049496600
[ 198.285632][ T9074] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[ 198.293629][ T9074] RBP: 0000000000000003 R08: ffffffff815e16e6 R09: ffffed1015d06618
[ 198.301591][ T9074] R10: ffffed1015d06618 R11: 0000000000000000 R12: dffffc0000000000
[ 198.309550][ T9074] R13: ffff8880497c8000 R14: ffff888096a01040 R15: 1ffff11014627038
[ 198.317527][ T9074] ? vprintk_emit+0x2e6/0x3b0
[ 198.322212][ T9074] sctp_wfree+0x3b1/0x710
[ 198.326556][ T9074] skb_release_head_state+0xfb/0x210
[ 198.331857][ T9074] __kfree_skb+0x22/0x1c0
[ 198.336210][ T9074] sctp_chunk_put+0x17b/0x200
[ 198.340928][ T9074] __sctp_outq_teardown+0x80a/0x9d0
[ 198.346246][ T9074] sctp_association_free+0x21e/0x7c0
[ 198.352497][ T9074] ? sctp_do_sm+0x2e2a/0x5560
[ 198.357185][ T9074] sctp_do_sm+0x3c01/0x5560
[ 198.361703][ T9074] ? rcu_read_lock_sched_held+0x106/0x170
[ 198.367447][ T9074] ? _sctp_make_chunk+0x10c/0x3e0
[ 198.372477][ T9074] ? rcu_read_lock_sched_held+0x106/0x170
[ 198.378206][ T9074] ? trace_kmem_cache_alloc+0xcb/0x120
[ 198.383679][ T9074] ? _sctp_make_chunk+0x10c/0x3e0
[ 198.388732][ T9074] ? sctp_auth_send_cid+0x60/0x250
[ 198.393878][ T9074] sctp_primitive_ABORT+0x93/0xc0
[ 198.398922][ T9074] sctp_close+0x231/0x770
[ 198.403269][ T9074] ? ip_mc_drop_socket+0x267/0x280
22:20:09 executing program 3:
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa4d67268366c0a4a, &(0x7f0000000100)=0x3, 0x4)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=<r3=>0x0], &(0x7f0000a8a000)=0xf6)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000)
[ 198.408400][ T9074] inet_release+0x135/0x180
[ 198.413347][ T9074] sock_close+0xd8/0x260
[ 198.417594][ T9074] ? sock_mmap+0x90/0x90
[ 198.421949][ T9074] __fput+0x2d8/0x730
[ 198.425975][ T9074] task_work_run+0x176/0x1b0
[ 198.430569][ T9074] prepare_exit_to_usermode+0x48e/0x600
[ 198.436109][ T9074] ? syscall_return_slowpath+0xf9/0x420
[ 198.441786][ T9074] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 198.447665][ T9074] RIP: 0033:0x416041
[ 198.451543][ T9074] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 198.471134][ T9074] RSP: 002b:00007ffc42814b40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 198.479526][ T9074] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416041
[ 198.487479][ T9074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 198.495466][ T9074] RBP: 0000000000000001 R08: 0000000009d56064 R09: 0000000009d56068
[ 198.504377][ T9074] R10: 00007ffc42814c20 R11: 0000000000000293 R12: 000000000076bf20
[ 198.512341][ T9074] R13: 0000000000771510 R14: 00000000000305a6 R15: 000000000076bf2c
[ 198.521905][ T9074] Kernel Offset: disabled
[ 198.526335][ T9074] Rebooting in 86400 seconds..