[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 55.662909][ T27] audit: type=1800 audit(1583792267.147:25): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 55.681750][ T27] audit: type=1800 audit(1583792267.147:26): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 55.717424][ T27] audit: type=1800 audit(1583792267.157:27): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.156' (ECDSA) to the list of known hosts. 2020/03/09 22:17:55 fuzzer started 2020/03/09 22:17:57 dialing manager at 10.128.0.26:41283 2020/03/09 22:17:57 syscalls: 2999 2020/03/09 22:17:57 code coverage: enabled 2020/03/09 22:17:57 comparison tracing: enabled 2020/03/09 22:17:57 extra coverage: enabled 2020/03/09 22:17:57 setuid sandbox: enabled 2020/03/09 22:17:57 namespace sandbox: enabled 2020/03/09 22:17:57 Android sandbox: /sys/fs/selinux/policy does not exist 2020/03/09 22:17:57 fault injection: enabled 2020/03/09 22:17:57 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/03/09 22:17:57 net packet injection: enabled 2020/03/09 22:17:57 net device setup: enabled 2020/03/09 22:17:57 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/03/09 22:17:57 devlink PCI setup: PCI device 0000:00:10.0 is not available 22:19:55 executing program 0: 22:19:55 executing program 1: syzkaller login: [ 183.989956][ T8782] IPVS: ftp: loaded support on port[0] = 21 [ 184.122978][ T8784] IPVS: ftp: loaded support on port[0] = 21 [ 184.194271][ T8782] chnl_net:caif_netlink_parms(): no params data found 22:19:55 executing program 2: [ 184.385768][ T8784] chnl_net:caif_netlink_parms(): no params data found [ 184.439592][ T8782] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.448535][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.456642][ T8782] device bridge_slave_0 entered promiscuous mode 22:19:56 executing program 3: [ 184.483316][ T8782] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.491683][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.501009][ T8782] device bridge_slave_1 entered promiscuous mode [ 184.531245][ T8791] IPVS: ftp: loaded support on port[0] = 21 [ 184.635028][ T8782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.657173][ T8784] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.665651][ T8784] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.675348][ T8784] device bridge_slave_0 entered promiscuous mode [ 184.687689][ T8782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.696840][ T8784] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.704087][ T8784] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.713552][ T8784] device bridge_slave_1 entered promiscuous mode [ 184.762075][ T8784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.785865][ T8782] team0: Port device team_slave_0 added [ 184.805672][ T8784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.839278][ T8796] IPVS: ftp: loaded support on port[0] = 21 [ 184.841534][ T8784] team0: Port device team_slave_0 added [ 184.871090][ T8782] team0: Port device team_slave_1 added [ 184.887595][ T8784] team0: Port device team_slave_1 added 22:19:56 executing program 4: [ 184.941570][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.957486][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.007357][ T8784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.033878][ T8784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.058011][ T8784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.084555][ T8784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.096586][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.104680][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.131297][ T8782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.145097][ T8782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.152505][ T8782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.178905][ T8782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 22:19:56 executing program 5: [ 185.291328][ T8784] device hsr_slave_0 entered promiscuous mode [ 185.347745][ T8784] device hsr_slave_1 entered promiscuous mode [ 185.460359][ T8782] device hsr_slave_0 entered promiscuous mode [ 185.527719][ T8782] device hsr_slave_1 entered promiscuous mode [ 185.607462][ T8782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.616169][ T8782] Cannot create hsr debugfs directory [ 185.630703][ T8798] IPVS: ftp: loaded support on port[0] = 21 [ 185.644982][ T8791] chnl_net:caif_netlink_parms(): no params data found [ 185.657401][ T8801] IPVS: ftp: loaded support on port[0] = 21 [ 185.814855][ T8791] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.822187][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.830548][ T8791] device bridge_slave_0 entered promiscuous mode [ 185.840823][ T8791] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.848034][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.855808][ T8791] device bridge_slave_1 entered promiscuous mode [ 185.863988][ T8796] chnl_net:caif_netlink_parms(): no params data found [ 185.936113][ T8791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.985290][ T8791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.032699][ T8791] team0: Port device team_slave_0 added [ 186.042858][ T8791] team0: Port device team_slave_1 added [ 186.055901][ T8801] chnl_net:caif_netlink_parms(): no params data found [ 186.122883][ T8798] chnl_net:caif_netlink_parms(): no params data found [ 186.132608][ T8782] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 186.179977][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.186956][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.212997][ T8791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.250204][ T8782] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 186.329261][ T8791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.336250][ T8791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.362423][ T8791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.380927][ T8796] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.388106][ T8796] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.395881][ T8796] device bridge_slave_0 entered promiscuous mode [ 186.406336][ T8796] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.413712][ T8796] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.421512][ T8796] device bridge_slave_1 entered promiscuous mode [ 186.428860][ T8784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 186.480130][ T8784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 186.529271][ T8782] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 186.576921][ T8784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 186.627757][ T8782] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 186.690707][ T8784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 186.775389][ T8796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.852432][ T8791] device hsr_slave_0 entered promiscuous mode [ 186.907905][ T8791] device hsr_slave_1 entered promiscuous mode [ 186.947408][ T8791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.955004][ T8791] Cannot create hsr debugfs directory [ 186.962090][ T8796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.004074][ T8798] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.011271][ T8798] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.019142][ T8798] device bridge_slave_0 entered promiscuous mode [ 187.029428][ T8798] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.036504][ T8798] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.044531][ T8798] device bridge_slave_1 entered promiscuous mode [ 187.062696][ T8801] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.069883][ T8801] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.077944][ T8801] device bridge_slave_0 entered promiscuous mode [ 187.088170][ T8796] team0: Port device team_slave_0 added [ 187.110689][ T8798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.122956][ T8798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.132551][ T8801] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.140749][ T8801] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.148868][ T8801] device bridge_slave_1 entered promiscuous mode [ 187.156904][ T8796] team0: Port device team_slave_1 added [ 187.208668][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.215661][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.243114][ T8796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.256865][ T8798] team0: Port device team_slave_0 added [ 187.266817][ T8798] team0: Port device team_slave_1 added [ 187.285137][ T8801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.296396][ T8796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.304349][ T8796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.330756][ T8796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.400603][ T8796] device hsr_slave_0 entered promiscuous mode [ 187.438194][ T8796] device hsr_slave_1 entered promiscuous mode [ 187.477503][ T8796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.485278][ T8796] Cannot create hsr debugfs directory [ 187.492756][ T8801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.502825][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.510112][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.536395][ T8798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.551127][ T8798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.558906][ T8798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.585209][ T8798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.654826][ T8801] team0: Port device team_slave_0 added [ 187.739375][ T8798] device hsr_slave_0 entered promiscuous mode [ 187.777775][ T8798] device hsr_slave_1 entered promiscuous mode [ 187.817469][ T8798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.825069][ T8798] Cannot create hsr debugfs directory [ 187.832899][ T8801] team0: Port device team_slave_1 added [ 187.881520][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.888780][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.915005][ T8801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.958312][ T8801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.965307][ T8801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.994259][ T8801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.059473][ T8801] device hsr_slave_0 entered promiscuous mode [ 188.087905][ T8801] device hsr_slave_1 entered promiscuous mode [ 188.137486][ T8801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.145062][ T8801] Cannot create hsr debugfs directory [ 188.165997][ T8791] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 188.210039][ T8791] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 188.281396][ T8791] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 188.361583][ T8791] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 188.444406][ T8784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.471976][ T8782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.549464][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.558544][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.566667][ T8796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 188.624508][ T8782] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.638280][ T8784] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.645518][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.655002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.663007][ T8796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 188.738467][ T8796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 188.790017][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.799602][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.809209][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.816408][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.833183][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.842380][ T8796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 188.927368][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.935939][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.944410][ T2780] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.951482][ T2780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.959689][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.970412][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.979136][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.986231][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.993918][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.003794][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.011796][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.021265][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.029813][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.036918][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.061456][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.091837][ T8798] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.120967][ T8798] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.169422][ T8798] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.219338][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.228319][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.237154][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.258943][ T8798] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 189.307164][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.316022][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.324612][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 189.342515][ T8801] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 189.403240][ T8784] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.414846][ T8784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.443346][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.456022][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.465908][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.474622][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.483072][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 189.491792][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 189.500412][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.509585][ T8801] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 189.573621][ T8801] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 189.634024][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.642348][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.653019][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.660754][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.669017][ T8801] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 189.732364][ T8791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.755419][ T8791] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.766239][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 189.775115][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.784256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 189.794089][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.812694][ T8782] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.824287][ T8782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.859018][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.868880][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.878746][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.887114][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.896100][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 189.905002][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.913871][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.921003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.929303][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 189.938256][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.946544][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.953624][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.962646][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.970534][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 189.986410][ T8784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.008478][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.017129][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.026976][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.035980][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.059529][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.134335][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.145979][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.155188][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.164315][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.189503][ T8801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.201031][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.212391][ T8791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.224785][ T8791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.233678][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.245880][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.254802][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.266355][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.275001][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.285466][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.303536][ T8796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.332950][ T8782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.353166][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.361160][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.369027][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.376687][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.384492][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.392977][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.404127][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.412056][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.421432][ T8798] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.431785][ T8796] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.446191][ T8784] device veth0_vlan entered promiscuous mode [ 190.458892][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.466450][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.474373][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 190.484527][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 190.499872][ T8801] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.506682][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.516310][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.525152][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.532235][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.541714][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.568846][ T8791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.586391][ T8784] device veth1_vlan entered promiscuous mode [ 190.609237][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 190.619183][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.628473][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.636780][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.643892][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.651912][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.662617][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.671462][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.680086][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.687151][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.695139][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.703823][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.712629][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 190.721920][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 190.730717][ T2776] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.737819][ T2776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.745383][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 190.754044][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 190.762997][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 190.771468][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.778576][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.810049][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 190.819138][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.827126][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 190.835381][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.844303][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 190.853937][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 190.863167][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 190.871834][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 190.881851][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 190.890664][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 190.938396][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.947223][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.957205][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 190.968230][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 190.976605][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 190.985307][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.993884][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.002715][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.011450][ T3148] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.018547][ T3148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.027033][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.036084][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.044824][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.070355][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.078895][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.086585][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.095706][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.104278][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.113197][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.122365][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.131039][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.139383][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.147800][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.159278][ T8798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.173650][ T8782] device veth0_vlan entered promiscuous mode [ 191.184301][ T8796] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.198917][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.206782][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.216272][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 191.224621][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 191.233127][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.241802][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.250943][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 191.259066][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.268143][ T8791] device veth0_vlan entered promiscuous mode [ 191.299436][ T8801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.310209][ T8801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.338866][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.350275][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.359937][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.371834][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.381447][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.391593][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.400981][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 191.411072][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.420676][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.430347][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.442065][ T8784] device veth0_macvtap entered promiscuous mode [ 191.456351][ T8784] device veth1_macvtap entered promiscuous mode [ 191.476945][ T8782] device veth1_vlan entered promiscuous mode [ 191.494651][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.503101][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.512534][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.521805][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.529420][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.536926][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.545077][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.559909][ T8791] device veth1_vlan entered promiscuous mode [ 191.597953][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.606108][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.614659][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.623771][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.639167][ T8796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.671216][ T8801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.686533][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.702759][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.713340][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.722305][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.731402][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.740253][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.752264][ T8782] device veth0_macvtap entered promiscuous mode [ 191.763730][ T8798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.776854][ T8784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.802806][ T8782] device veth1_macvtap entered promiscuous mode [ 191.825373][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 191.834577][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 191.845546][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.855154][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.864676][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.873577][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.885084][ T8791] device veth0_macvtap entered promiscuous mode [ 191.926711][ T8791] device veth1_macvtap entered promiscuous mode [ 191.953093][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 191.964742][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.976761][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.044186][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.053621][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.063183][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.072498][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.082472][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.099130][ T8782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.111288][ T8782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.124362][ T8782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.215046][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.224030][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.246792][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.260109][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.270561][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.281577][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.293530][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.332709][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.341670][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.358800][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.370569][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.381048][ T8791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.391840][ T8791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.405010][ T8791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.431660][ T8796] device veth0_vlan entered promiscuous mode 22:20:03 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 192.510187][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.531185][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.543063][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.553061][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.563089][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.572639][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.580802][ T8833] EXT4-fs (sda1): re-mounted. Opts: grpjquota=, [ 192.591316][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.600233][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.634236][ T8796] device veth1_vlan entered promiscuous mode [ 192.709632][ T8836] EXT4-fs (sda1): re-mounted. Opts: grpjquota=, [ 192.725555][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.733432][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.742726][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.751232][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 22:20:04 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 192.764907][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.817229][ T8798] device veth0_vlan entered promiscuous mode [ 192.881747][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.894656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.903424][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.904262][ T8844] EXT4-fs (sda1): re-mounted. Opts: grpjquota=, [ 192.911754][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.926227][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.936677][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.945072][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.953319][ T8801] device veth0_vlan entered promiscuous mode 22:20:04 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 192.987073][ T8798] device veth1_vlan entered promiscuous mode 22:20:04 executing program 0: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000280002000800010000000000040004005312020000000000080002000000000008009cd31ced5a3614a6070008000200000000000c000400000000000000000008000100000000000c00030000000000000000000c000400000000000000000008000200000000000c0009"], 0x3}}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1, 0x0, 0xffffffffffffff49}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) [ 193.120209][ T8850] EXT4-fs (sda1): re-mounted. Opts: grpjquota=, 22:20:04 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 193.183939][ T8801] device veth1_vlan entered promiscuous mode [ 193.215052][ T8798] device veth0_macvtap entered promiscuous mode [ 193.297819][ T8796] device veth0_macvtap entered promiscuous mode [ 193.332530][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 22:20:04 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x402c5342, &(0x7f0000000440)={0x0, 0x4000, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a01]}) [ 193.342622][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.359513][ T8865] EXT4-fs (sda1): re-mounted. Opts: grpjquota=, [ 193.366772][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.376343][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.390160][ T8798] device veth1_macvtap entered promiscuous mode [ 193.401535][ T8867] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 193.414205][ T8867] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 22:20:04 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 193.457394][ T8867] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.488675][ T8796] device veth1_macvtap entered promiscuous mode [ 193.496378][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.512562][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.540169][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.554269][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.558792][ C1] hrtimer: interrupt took 48526 ns 22:20:05 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) 22:20:05 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 193.644492][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.675183][ T2684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.726667][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.767634][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.778338][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.792061][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.803438][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.814420][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.827073][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.841759][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.855701][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.871356][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.883340][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.898746][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.921270][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.946415][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 193.957605][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.969330][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.982166][ T8801] device veth0_macvtap entered promiscuous mode [ 193.992882][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.002350][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.011405][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.020850][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.030923][ T2780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.043413][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.055325][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.067221][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.079637][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.089632][ T8798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.100277][ T8798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.113270][ T8798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.130192][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.141600][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.153973][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.165709][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.175676][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.186132][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.196098][ T8796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.206761][ T8796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.219849][ T8796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.227612][ T8892] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 194.235891][ T8892] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 194.247517][ T8892] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.257155][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.266177][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.276879][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.285872][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.317132][ T8801] device veth1_macvtap entered promiscuous mode [ 194.433851][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.444963][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.455302][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.465827][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.476015][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.487175][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.498371][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.509618][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.519630][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 194.530519][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.542427][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.649091][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 194.660810][ T2806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 194.674359][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.685457][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.695823][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.706375][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.717385][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.731483][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.741535][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.751994][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.761865][ T8801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 194.772338][ T8801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.783758][ T8801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.850241][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.862275][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.969226][ T0] NOHZ: local_softirq_pending 08 22:20:06 executing program 3: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) 22:20:06 executing program 4: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000000000000200000007000200c0feffff010400000700000000e2ffff0c000000dde60000340f00004e0b0000060000000000000008000080000001001c5b00007f0000001f0000000000000008000080020000000004000002000000643100000000000000000000a80c000000000100018000af400000010001800000a1709260489bdfdc18d8c1000800000200000000000000009b83f9ed000000fd000000265f00c0cf000000000000000000000035252fa6e4af9a0990da7becc32329f1920c998565748c5c4a0cf6592f9566fce196a3cd338d67fa0a2091897d9a9fbdb8b908187521b127a69b0a9f29aa01779ab787695280cf07bdef4e34aa2743e91bc22232de37ed1fb07eed85773502ca088439face625f6e7c7eb1"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) 22:20:06 executing program 5: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) 22:20:06 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:06 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="07000000000000000200000007000200c0feffff010400000700000000e2ffff0c000000dde60000340f00004e0b0000060000000000000008000080000001001c5b00007f0000001f0000000000000008000080020000000004000002000000643100000000000000000000a80c000000000100018000af400000010001800000a1709260489bdfdc18d8c1000800000200000000000000009b83f9ed000000fd000000265f00c0cf000000000000000000000035252fa6e4af9a0990da7becc32329f1920c998565748c5c4a0cf6592f9566fce196a3cd338d67fa0a2091897d9a9fbdb8b908187521b127a69b0a9f29aa01779ab787695280cf07bdef4e34aa2743e91bc22232de37ed1fb07eed85773502ca088439face625f6e7c7eb1"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) 22:20:06 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) 22:20:06 executing program 1: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:07 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9}) 22:20:07 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r1, 0x301}, 0x14}}, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) 22:20:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='gid_map\x00') r1 = gettid() tkill(r1, 0x40020000000c) writev(r0, &(0x7f00000013c0)=[{&(0x7f0000000180)="43d30d226d2873b23fec12fb44753e8ebc4ed989780143206c638452fec8a742bab95d2b5393b910a8e82fc93383e0dc626710183d6f48f21bfb3e7cd95b994433c8b0a230f42a6140a2bca5c4bb2153c3134306ba4295c26854d6fa255a21f70db1833f7f87375b421c623355f3a072cc8544d2cfcba9cc274183899ad02ba43b5609a339187769b8d16e2c6b80456a54b015060a02", 0x96}], 0x1) 22:20:07 executing program 1: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:07 executing program 5: write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}]) 22:20:07 executing program 3: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x21, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:20:07 executing program 2: syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200), 0x4) gettid() ptrace$setopts(0x4206, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = dup2(r1, r0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x8104, 0x4}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000180)={0x0, 0x0, 0x0}) wait4(0x0, 0x0, 0x80000000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = dup2(r3, r3) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(r4, 0x0, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000040)=""/247) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000240)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = dup2(r6, r5) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8}, 0x10) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) getpid() r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r8, 0x4b6a, &(0x7f00000002c0)) [ 195.901806][ T8943] loop5: p1 p2 p3 p4 [ 195.907015][ T8943] loop5: p1 size 11290111 extends beyond EOD, truncated [ 195.925641][ T8943] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 195.940532][ T8943] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 195.963646][ T8943] loop5: p4 size 3657465856 extends beyond EOD, truncated 22:20:07 executing program 5: write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}]) 22:20:07 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r0) 22:20:07 executing program 1: mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:07 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xa}, {0x8}}}]}}]}, 0x58}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c5) read$FUSE(r0, &(0x7f0000000380), 0x1000) [ 196.183002][ T8965] loop5: p1 p2 p3 p4 [ 196.187909][ T8965] loop5: p1 size 11290111 extends beyond EOD, truncated [ 196.208850][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.224579][ T8965] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 196.283629][ T8965] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 196.308869][ T2776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 22:20:07 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(r0) [ 196.338954][ T2776] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.346126][ T2776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.362455][ T8965] loop5: p4 size 3657465856 extends beyond EOD, truncated [ 196.653043][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.682032][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.689238][ T8952] bridge0: port 1(bridge_slave_0) entered forwarding state 22:20:08 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9}) 22:20:08 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0xa}, {0x8}}}]}}]}, 0x58}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040c5) read$FUSE(r0, &(0x7f0000000380), 0x1000) 22:20:08 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="090ef28b00", @dev, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x0) 22:20:08 executing program 1: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:08 executing program 5: write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}]) 22:20:08 executing program 0: sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="0000000000000075073a0000000f000000280002000800010000000000040004005312020000000000080002000000000008009cd31ced5a3614a6070008000200000000000c000400000000000000000008000100000000000c00030000000000000000000c0004"], 0x3}}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x3f2}], 0x1, 0x0, 0xffffffffffffff49}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 22:20:08 executing program 3: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x40000, 0x0) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x10}, {r1, 0x2000}], 0x2, &(0x7f00000001c0), &(0x7f0000000240), 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}, 0x0) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f00000003c0)=0xb5e, 0x4) listen(r2, 0x100000001) r4 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) recvmmsg(r4, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 22:20:08 executing program 1: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 196.959367][ T9003] loop5: p1 p2 p3 p4 [ 196.964114][ T9003] loop5: p1 size 11290111 extends beyond EOD, truncated [ 197.016081][ T9003] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 197.024935][ T9003] loop5: p3 size 1912633224 extends beyond EOD, truncated [ 197.033900][ T9003] loop5: p4 size 3657465856 extends beyond EOD, truncated 22:20:08 executing program 2: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x24, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) 22:20:08 executing program 1: creat(0x0, 0x0) mount(&(0x7f0000000480)=ANY=[@ANYBLOB='./file0'], &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:08 executing program 2: syz_emit_ethernet(0x66, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}, 0x0) [ 197.379861][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state 22:20:08 executing program 5: write$P9_RREAD(0xffffffffffffffff, &(0x7f00000001c0)={0xb}, 0xb) syz_read_part_table(0x0, 0x5, &(0x7f0000000180)=[{&(0x7f0000000000)="0201a6ffffff0a000000ff45ac0000ffffff81000800000000000000004000ffffffa9000000e1000000887700720030070063000fffff000000008000da55aa", 0x40, 0x1c0}]) [ 197.631702][ T9018] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 197.667685][ T9018] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 197.681874][ T9056] loop5: p1 p2 p3 p4 [ 197.686878][ T9056] loop5: p1 size 11290111 extends beyond EOD, truncated [ 197.707892][ T9018] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.730449][ T9061] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 197.737637][ T9056] loop5: p2 size 1073741824 extends beyond EOD, truncated [ 197.745060][ T9061] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 197.754961][ T9061] netlink: 33 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.763730][ T9056] loop5: p3 size 1912633224 extends beyond EOD, truncated 22:20:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bridge_slave_0\x00', 0xffc9}) 22:20:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) 22:20:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000002c0)) 22:20:09 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa4d67268366c0a4a, &(0x7f0000000100)=0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) 22:20:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x0, 0x0, 0x7, 0x0, 0x400000000000000}, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) [ 197.777415][ T3148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.786010][ T3148] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.793161][ T3148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.836607][ T9056] loop5: p4 size 3657465856 extends beyond EOD, truncated 22:20:09 executing program 1: creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x1081004, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000180)={[{@grpjquota='grpjquota='}]}) [ 198.048872][ T9075] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.062529][ T9074] ------------[ cut here ]------------ [ 198.099411][ T9074] refcount_t: underflow; use-after-free. [ 198.157361][ T9074] WARNING: CPU: 0 PID: 9074 at lib/refcount.c:28 refcount_warn_saturate+0x15b/0x1a0 [ 198.166766][ T9074] Kernel panic - not syncing: panic_on_warn set ... [ 198.173360][ T9074] CPU: 0 PID: 9074 Comm: syz-executor.0 Not tainted 5.6.0-rc5-syzkaller #0 [ 198.181946][ T9074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.192008][ T9074] Call Trace: [ 198.195314][ T9074] dump_stack+0x1e9/0x30e [ 198.199651][ T9074] panic+0x264/0x7a0 [ 198.203546][ T9074] ? __warn+0x102/0x210 [ 198.207712][ T9074] ? refcount_warn_saturate+0x15b/0x1a0 [ 198.213262][ T9074] __warn+0x209/0x210 [ 198.217246][ T9074] ? refcount_warn_saturate+0x15b/0x1a0 [ 198.222794][ T9074] report_bug+0x1ac/0x2d0 [ 198.227125][ T9074] do_error_trap+0xca/0x1c0 [ 198.231623][ T9074] do_invalid_op+0x32/0x40 [ 198.236020][ T9074] ? refcount_warn_saturate+0x15b/0x1a0 [ 198.241651][ T9074] invalid_op+0x23/0x30 [ 198.245842][ T9074] RIP: 0010:refcount_warn_saturate+0x15b/0x1a0 [ 198.252021][ T9074] Code: c7 e4 ff d0 88 31 c0 e8 23 20 b3 fd 0f 0b eb 85 e8 8a 4a e0 fd c6 05 ff 70 b1 05 01 48 c7 c7 10 00 d1 88 31 c0 e8 05 20 b3 fd <0f> 0b e9 64 ff ff ff e8 69 4a e0 fd c6 05 df 70 b1 05 01 48 c7 c7 [ 198.271613][ T9074] RSP: 0018:ffffc900056e78e0 EFLAGS: 00010246 [ 198.277665][ T9074] RAX: d9e463d085c89800 RBX: 0000000000000003 RCX: ffff888049496600 [ 198.285632][ T9074] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 198.293629][ T9074] RBP: 0000000000000003 R08: ffffffff815e16e6 R09: ffffed1015d06618 [ 198.301591][ T9074] R10: ffffed1015d06618 R11: 0000000000000000 R12: dffffc0000000000 [ 198.309550][ T9074] R13: ffff8880497c8000 R14: ffff888096a01040 R15: 1ffff11014627038 [ 198.317527][ T9074] ? vprintk_emit+0x2e6/0x3b0 [ 198.322212][ T9074] sctp_wfree+0x3b1/0x710 [ 198.326556][ T9074] skb_release_head_state+0xfb/0x210 [ 198.331857][ T9074] __kfree_skb+0x22/0x1c0 [ 198.336210][ T9074] sctp_chunk_put+0x17b/0x200 [ 198.340928][ T9074] __sctp_outq_teardown+0x80a/0x9d0 [ 198.346246][ T9074] sctp_association_free+0x21e/0x7c0 [ 198.352497][ T9074] ? sctp_do_sm+0x2e2a/0x5560 [ 198.357185][ T9074] sctp_do_sm+0x3c01/0x5560 [ 198.361703][ T9074] ? rcu_read_lock_sched_held+0x106/0x170 [ 198.367447][ T9074] ? _sctp_make_chunk+0x10c/0x3e0 [ 198.372477][ T9074] ? rcu_read_lock_sched_held+0x106/0x170 [ 198.378206][ T9074] ? trace_kmem_cache_alloc+0xcb/0x120 [ 198.383679][ T9074] ? _sctp_make_chunk+0x10c/0x3e0 [ 198.388732][ T9074] ? sctp_auth_send_cid+0x60/0x250 [ 198.393878][ T9074] sctp_primitive_ABORT+0x93/0xc0 [ 198.398922][ T9074] sctp_close+0x231/0x770 [ 198.403269][ T9074] ? ip_mc_drop_socket+0x267/0x280 22:20:09 executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0xa4d67268366c0a4a, &(0x7f0000000100)=0x3, 0x4) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f00003cef9f)='7', 0x34000, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4040000", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000a8a000)=0xf6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x7a, &(0x7f000059aff8)={r3}, &(0x7f000034f000)=0x2059b000) [ 198.408400][ T9074] inet_release+0x135/0x180 [ 198.413347][ T9074] sock_close+0xd8/0x260 [ 198.417594][ T9074] ? sock_mmap+0x90/0x90 [ 198.421949][ T9074] __fput+0x2d8/0x730 [ 198.425975][ T9074] task_work_run+0x176/0x1b0 [ 198.430569][ T9074] prepare_exit_to_usermode+0x48e/0x600 [ 198.436109][ T9074] ? syscall_return_slowpath+0xf9/0x420 [ 198.441786][ T9074] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 198.447665][ T9074] RIP: 0033:0x416041 [ 198.451543][ T9074] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 198.471134][ T9074] RSP: 002b:00007ffc42814b40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 198.479526][ T9074] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000416041 [ 198.487479][ T9074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 198.495466][ T9074] RBP: 0000000000000001 R08: 0000000009d56064 R09: 0000000009d56068 [ 198.504377][ T9074] R10: 00007ffc42814c20 R11: 0000000000000293 R12: 000000000076bf20 [ 198.512341][ T9074] R13: 0000000000771510 R14: 00000000000305a6 R15: 000000000076bf2c [ 198.521905][ T9074] Kernel Offset: disabled [ 198.526335][ T9074] Rebooting in 86400 seconds..