[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 56.560741][ T26] audit: type=1800 audit(1574006918.356:25): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 56.593784][ T26] audit: type=1800 audit(1574006918.356:26): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 56.631219][ T26] audit: type=1800 audit(1574006918.356:27): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.146' (ECDSA) to the list of known hosts. 2019/11/17 16:08:48 fuzzer started 2019/11/17 16:08:50 dialing manager at 10.128.0.26:44591 2019/11/17 16:08:50 syscalls: 2566 2019/11/17 16:08:50 code coverage: enabled 2019/11/17 16:08:50 comparison tracing: enabled 2019/11/17 16:08:50 extra coverage: enabled 2019/11/17 16:08:50 setuid sandbox: enabled 2019/11/17 16:08:50 namespace sandbox: enabled 2019/11/17 16:08:50 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/17 16:08:50 fault injection: enabled 2019/11/17 16:08:50 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/17 16:08:50 net packet injection: enabled 2019/11/17 16:08:50 net device setup: enabled 2019/11/17 16:08:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/17 16:08:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 16:11:19 executing program 0: pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x0, 0x84) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(0xffffffffffffffff, 0xc0385650, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x9000000) 16:11:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000003600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) syzkaller login: [ 217.586339][ T8914] IPVS: ftp: loaded support on port[0] = 21 [ 217.716172][ T8916] IPVS: ftp: loaded support on port[0] = 21 16:11:19 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getrandom(&(0x7f0000000300)=""/4096, 0x1000, 0x0) [ 217.792357][ T8914] chnl_net:caif_netlink_parms(): no params data found [ 217.925607][ T8914] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.932712][ T8914] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.943541][ T8919] IPVS: ftp: loaded support on port[0] = 21 [ 217.957509][ T8914] device bridge_slave_0 entered promiscuous mode [ 218.006785][ T8914] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.013883][ T8914] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.023781][ T8914] device bridge_slave_1 entered promiscuous mode 16:11:19 executing program 3: sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000032", @ANYRES16, @ANYBLOB="00032bae5f1bf57ede0cfa72a378bd7000fedbdf25080000007800010014000300f82b208bf4068f9db0f6ff17d86fca7b080009005100000000000500ae010000080004000000000008000600666f000014000300fe80000000000000000000000000001208000900130000000800080002000000080005000000000014000300fe80496a62723c9fc1df0000000000120800050001000000ef030500d50000000800060006000000340003000800030003000000080003001f000000080004000000000008000506000000aa0800040000000000080007004e2100000c0003000800030000000000370105000000000008000600810000000800050052c0000043ef7f3bb0b9bc99d9a4b86cad11f964d6257386dde00ae8920dc16a65e76790e2e242c34864a0a5f991c7c4ce1968dd0bcadb57d1ab410b4095c8329413363e8a03a5b558a7c1dcfc0e3b40e79cb43aafbe8b83d2814c39cd08d86cabd6a860b33a4fbc510a743e306b68030b8bc642fdee5ef2f2a9cb8dc9e226d3da7b525d4c33754c08fa8755e683c8e24f66bf08b8444ef877a80c4d95e85b336108cf58309515fd55d6a2f6db015a5815ad9184cbe1881198f8c98765a2c635fcad038d4a5fcbc3618700a88635ef59381ef3ab6a18b9e9a1469fb0caae70293cbdd1a9cd9a169ba722f60a147469543bc4a48052a40a9a4a5411a4b54f7f"], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000030000000100000002", 0xffb8, 0x1400}], 0x0, 0x0) [ 218.067425][ T8914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.085426][ T8914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.108953][ T8916] chnl_net:caif_netlink_parms(): no params data found [ 218.189616][ T8914] team0: Port device team_slave_0 added [ 218.226400][ T8914] team0: Port device team_slave_1 added [ 218.251708][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.261830][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.270188][ T8916] device bridge_slave_0 entered promiscuous mode [ 218.284132][ T8922] IPVS: ftp: loaded support on port[0] = 21 [ 218.299332][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.307568][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.316197][ T8916] device bridge_slave_1 entered promiscuous mode 16:11:20 executing program 4: r0 = getpid() r1 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/18, 0x33c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x200000000bd, @time}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1000000000015) [ 218.428478][ T8914] device hsr_slave_0 entered promiscuous mode [ 218.494441][ T8914] device hsr_slave_1 entered promiscuous mode [ 218.558958][ T8916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.599696][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 218.613029][ T8916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 16:11:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "4c000f", 0x40, 0x3a, 0x0, @empty, @mcast2, {[], @icmpv6=@dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, "d5cae2", 0x0, 0x0, 0x0, @empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, [@hopopts={0x2f, 0x0, [0x0, 0x2]}], "020088beffff0000"}}}}}}}, 0x0) [ 218.651432][ T8925] IPVS: ftp: loaded support on port[0] = 21 [ 218.659603][ T8914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.708793][ T8914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.791838][ T8914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.852097][ T8914] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.931055][ T8916] team0: Port device team_slave_0 added [ 218.950797][ T8927] IPVS: ftp: loaded support on port[0] = 21 [ 218.968266][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.976702][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.984704][ T8919] device bridge_slave_0 entered promiscuous mode [ 218.993745][ T8916] team0: Port device team_slave_1 added [ 219.027040][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.036427][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.044257][ T8919] device bridge_slave_1 entered promiscuous mode [ 219.116034][ T8916] device hsr_slave_0 entered promiscuous mode [ 219.184859][ T8916] device hsr_slave_1 entered promiscuous mode [ 219.235306][ T8916] debugfs: Directory 'hsr0' with parent '/' already present! [ 219.282700][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.297552][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.326240][ T8922] chnl_net:caif_netlink_parms(): no params data found [ 219.363870][ T8919] team0: Port device team_slave_0 added [ 219.402637][ T8919] team0: Port device team_slave_1 added [ 219.418735][ T8916] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.493072][ T8916] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.551556][ T8916] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.588169][ T8916] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.673202][ T8922] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.680998][ T8922] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.688963][ T8922] device bridge_slave_0 entered promiscuous mode [ 219.697145][ T8922] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.704327][ T8922] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.712065][ T8922] device bridge_slave_1 entered promiscuous mode [ 219.797348][ T8919] device hsr_slave_0 entered promiscuous mode [ 219.844483][ T8919] device hsr_slave_1 entered promiscuous mode [ 219.894205][ T8919] debugfs: Directory 'hsr0' with parent '/' already present! [ 219.927682][ T8922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.939834][ T8922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.950173][ T8927] chnl_net:caif_netlink_parms(): no params data found [ 219.961414][ T8925] chnl_net:caif_netlink_parms(): no params data found [ 220.008445][ T8922] team0: Port device team_slave_0 added [ 220.033029][ T8914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.049350][ T8922] team0: Port device team_slave_1 added [ 220.077085][ T8925] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.086491][ T8925] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.094989][ T8925] device bridge_slave_0 entered promiscuous mode [ 220.148411][ T8922] device hsr_slave_0 entered promiscuous mode [ 220.204687][ T8922] device hsr_slave_1 entered promiscuous mode [ 220.274192][ T8922] debugfs: Directory 'hsr0' with parent '/' already present! [ 220.305811][ T8925] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.312903][ T8925] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.320987][ T8925] device bridge_slave_1 entered promiscuous mode [ 220.339005][ T8927] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.347377][ T8927] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.355835][ T8927] device bridge_slave_0 entered promiscuous mode [ 220.366068][ T8927] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.373227][ T8927] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.382185][ T8927] device bridge_slave_1 entered promiscuous mode [ 220.390821][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.399939][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.410353][ T8914] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.443505][ T8927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.461769][ T8919] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.520865][ T8925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.533155][ T8925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.543551][ T8927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.566339][ T8919] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.610590][ T8919] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.678808][ T8919] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.745845][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.755915][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.768407][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.775675][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.784429][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.809579][ T8922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.862649][ T8922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.926868][ T8925] team0: Port device team_slave_0 added [ 220.934653][ T8925] team0: Port device team_slave_1 added [ 220.957274][ T8927] team0: Port device team_slave_0 added [ 221.010391][ T8925] device hsr_slave_0 entered promiscuous mode [ 221.064613][ T8925] device hsr_slave_1 entered promiscuous mode [ 221.114214][ T8925] debugfs: Directory 'hsr0' with parent '/' already present! [ 221.121869][ T8922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.180091][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.188963][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.197552][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.204662][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.212203][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.221828][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.238786][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.247681][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.256154][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.264825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.275547][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.286722][ T8927] team0: Port device team_slave_1 added [ 221.295322][ T8916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.312605][ T8922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.379039][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.387959][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.410047][ T8916] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.432044][ T8914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.445491][ T8914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.457710][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.466017][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.473789][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.482260][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.514167][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.522919][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.532131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.539276][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.546932][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.555931][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.564682][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.571770][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.627032][ T8927] device hsr_slave_0 entered promiscuous mode [ 221.694946][ T8927] device hsr_slave_1 entered promiscuous mode [ 221.734336][ T8927] debugfs: Directory 'hsr0' with parent '/' already present! [ 221.768723][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.788351][ T8925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.850852][ T8925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.897913][ T8925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.946692][ T8925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.985648][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.993240][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.004983][ T8914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.040560][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.051870][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 222.060834][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 222.069919][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 222.078565][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 222.087456][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 222.096581][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 222.113485][ T8927] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 222.146195][ T8927] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 222.196870][ T8927] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 222.279855][ T8919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.297297][ T8927] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 222.364838][ T8916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.376497][ T8916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.388394][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 222.398461][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 222.407127][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 222.415419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 222.423559][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.492116][ T8922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.523237][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.534384][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.562784][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.571098][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.583197][ T8922] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.613984][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 222.623189][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 222.633319][ T8916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.657260][ T8919] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.682812][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.692729][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.701565][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.708727][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.720543][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.729637][ T2962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.738654][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.745795][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.792522][ T8925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.806382][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 222.820051][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 16:11:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x2, 0x800000000000004, 0x0, 0x28ad, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x9, 0x4, 0x100000001, 0x0, r1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0xff64, 0x0}, 0xffffffffffffff36) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="a000000076e71d0d6de02c7dfaa2c7ce8f48d4599dc614dee25df9b7e13d5a3635937fa60c94f89778692a483308bb94e29c8dd4e4c20e8176553b58f7ae533fb5ca43665830e05642085fef5b2fd8c584df8147459e354fd4052e7a0efcda9f9eb60f31077935852f4649c6d236cf2c107eae386da125836af65485427f5bd126ce20c986b2bb6f0c549ce98d7cd0bce006ce6fa508727ed6121209f588c43618f8"], &(0x7f0000000140)=0xa8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x10000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x35f) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38) mq_getsetattr(r0, 0x0, &(0x7f00000003c0)) [ 222.842065][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.865276][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.872374][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.884345][ C0] hrtimer: interrupt took 39427 ns [ 222.913732][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.944831][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.953288][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.960405][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.974567][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.985122][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 222.994560][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 16:11:24 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r1, &(0x7f0000003600)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) [ 223.016741][ T8927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.041593][ T8925] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.068941][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.097353][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.122752][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.139747][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 16:11:25 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x0, 0xffffffffffffff4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xfffffbfffff3ffa7, &(0x7f0000000140)) [ 223.195602][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.211754][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.231176][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 16:11:25 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3}}) [ 223.242435][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.257407][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 16:11:25 executing program 0: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000288, 0x0) [ 223.300601][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 16:11:25 executing program 1: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0x1fc0}], 0x2) [ 223.344214][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.352930][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.383345][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.390507][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.405323][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.419799][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.429780][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.436940][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.450852][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.459948][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.475140][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.482946][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.498540][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.550328][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.561617][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.576824][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 16:11:25 executing program 1: socket(0x10, 0x3, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = dup(r1) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x4c81, 0xfffffffffffffffe) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x40, 0x0, 0xffffffff}, 0x10) r3 = socket(0x1e, 0x0, 0x0) fsync(r0) r4 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$packet(r6, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$cgroup_ro(r4, &(0x7f0000000180)='pids.events\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r7, @ANYBLOB="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"], 0x3}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x2, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, 0x0, 0x0) r9 = socket(0x100000000011, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0xfeeb) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000013c0)={'vxcan1\x00', r10}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)=@gettfilter={0x60, 0x2e, 0x0, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd6ab3e07f1083b41, 0x3}, {0x5, 0xfff3}, {0x0, 0x4}}, [{0x8, 0xb, 0x5}, {0x8}, {0x8}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xa0}, {0x8, 0xb, 0x7f}, {0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8004) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg(r3, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x0, "02000009000c0000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, 0x0}, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0xe04100, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r12 = dup(r11) ioctl$sock_inet6_tcp_SIOCINQ(r12, 0x4c81, 0xfffffffffffffffe) [ 223.597678][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.610342][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.636419][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.652995][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.662040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.676641][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.685589][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.693801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 223.703371][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 223.711978][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.721442][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.731014][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.745892][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.761359][ T8919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.775591][ T8922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.793859][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 223.801785][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.810364][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.821736][ T8927] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.845347][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.853734][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.878850][ T8925] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.903665][ T8922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.953567][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.962125][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.969777][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 223.969884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 223.983824][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.992135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 223.992174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 224.004190][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 224.004535][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 224.010260][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 224.015962][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 224.028571][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.037155][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.044302][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state 16:11:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0x10, 0xfffffffffffffffb}, 0x0) pipe2(0x0, 0x84000) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000580)='./bus\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x20) epoll_create1(0x0) r4 = semget$private(0x0, 0x2000000010a, 0x0) semctl$IPC_RMID(r4, 0x0, 0x0) semctl$IPC_INFO(r4, 0x4, 0x3, &(0x7f0000000140)=""/158) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f0000000300)='/dev/vbi#\x00', 0x1, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0x76656f) [ 224.060670][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.072210][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.086971][ T2902] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.094147][ T2902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.102715][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.110473][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.125184][ T2902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.181183][ T8933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.208355][ T8919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.242549][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.258876][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.280107][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.412586][ T8925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.432220][ T8986] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 224.452629][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 224.461880][ T8986] F2FS-fs (loop3): Insane cp_payload (32591 > 510) [ 224.467301][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.474964][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 224.489851][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.506451][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.549832][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.575492][ T8986] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 224.583364][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 224.607209][ T8986] F2FS-fs (loop3): Insane cp_payload (32591 > 510) [ 224.619364][ T8986] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 224.629056][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.658732][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.667226][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.679049][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.688022][ T8928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.709715][ T8927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 16:11:26 executing program 2: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1141068, 0x0) 16:11:26 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) [ 224.772091][ T8927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.791099][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.804699][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.912189][ T9004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:11:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) 16:11:27 executing program 0: unshare(0x20060400) write$sndseq(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) r1 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x4, "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", 0xffffffffffffff5a}, 0x1006) dup3(r1, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) mkdir(0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) 16:11:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000300)={0x1, 0x0, 0x0, "0f"}) 16:11:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x803, 0xa0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x3, &(0x7f0000000200)={{{@in=@broadcast, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, 0xe8) 16:11:27 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xe1002, 0x0) write$9p(r2, &(0x7f0000000140)="0600000000000000c9b9000f07000000001ff7adf576f3790f68bc2c197cbf8d63735a09ab8383afd2de1a5587fe067f00002000249e1dabddb514480a169fc72518f833b3aacfcf04f7b0bdd78687fc006bff51b9f9218a249e3d00000000000000000000000053", 0x68) 16:11:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x3ff, 'syz0\x00'}) io_setup(0x7, &(0x7f0000000300)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000040), 0xff66}]) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 225.951788][ T9028] sd 0:0:1:0: device reset [ 225.957141][ T9030] dlm: no locking on control device [ 225.994768][ T9040] dlm: no locking on control device [ 225.998386][ T9035] skbuff: bad partial csum: csum=12410/0 headroom=64 headlen=3712 [ 226.009012][ T9042] sd 0:0:1:0: device reset 16:11:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000300)={0x1, 0x0, 0x0, "0f"}) 16:11:27 executing program 2: syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x802) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'HL\x00'}, &(0x7f00000000c0)=0x1e) 16:11:27 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) 16:11:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000300)) [ 226.193289][ T9055] sd 0:0:1:0: device reset 16:11:28 executing program 2: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0x200003cc}], 0x2) 16:11:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet(0x2, 0x803, 0xa0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000002d80)={@multicast2, @local}, 0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x29, &(0x7f0000000200)={{{@in6=@mcast2, @in=@remote}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, 0xe8) 16:11:28 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$inet6(r0, &(0x7f00000001c0)="030414040900700000000000fff57b016d2763bd56373780398d537500620002591f031ee616d5ac184374a7ffe4ec55e06573c672ca1867d6ce4145fa89a3584786a70100935ba514d4572e928eb10808ef2548405f75667fdb8d49a47d7927b2719a7eff71bc4131fe4c1f99bf00a900000008d1843e", 0xfffffffffffffd79, 0x4000002, 0x0, 0x0) [ 226.340703][ T9035] skbuff: bad partial csum: csum=12410/0 headroom=64 headlen=3712 16:11:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8c, 0x0, &(0x7f0000000000)) 16:11:28 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0x5420, 0x0) 16:11:28 executing program 4: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, 0x0) process_vm_readv(0x0, &(0x7f0000000380), 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 16:11:28 executing program 2: syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket$unix(0x1, 0x104000000000001, 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$caif_stream(0x25, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x400801, 0x0) getpid() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2000, 0x0) utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x0, 0x7530}, {0x0, 0x7530}}, 0x0) socket$kcm(0x10, 0x2, 0x4) setxattr$trusted_overlay_redirect(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x3) syz_open_procfs(0x0, &(0x7f0000000140)='comm\x00') 16:11:28 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x3ff, 'syz0\x00'}) io_setup(0x7, &(0x7f0000000300)=0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r2, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r3, &(0x7f0000000040), 0xff66}]) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 16:11:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(0xffffffffffffffff, &(0x7f0000001d40)=[{&(0x7f0000000b80)="f85816a59dd6", 0x6}], 0x1) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c00000010000000140000030000000100000002", 0xffb8, 0x1400}], 0x0, 0x0) 16:11:28 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f000000a840)=[{{&(0x7f0000002840)={0xa, 0x0, 0x0, @remote={0xfe, 0x10}}, 0x1c, &(0x7f0000002a80)=[{&(0x7f0000002880)='*', 0x1}], 0x1}}], 0x1, 0x0) [ 226.820751][ T9095] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 226.854189][ T9095] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 16:11:28 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000), 0xc) [ 226.868744][ T9095] F2FS-fs (loop3): Corrupted extension count (0 + 214 > 64) [ 226.877372][ T9095] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 16:11:28 executing program 4: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, 0x0) process_vm_readv(0x0, &(0x7f0000000380), 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 16:11:28 executing program 0: unshare(0x20060400) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x1e2c2924c0431155) write$sndseq(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r1, &(0x7f00000002c0)={0x4, "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", 0xffffffffffffff5a}, 0x1006) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) [ 227.021633][ T9117] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 227.047224][ T9117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 227.060882][ T9117] F2FS-fs (loop3): Corrupted extension count (0 + 214 > 64) [ 227.069332][ T9117] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 16:11:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000100)={@dev, 0x8}, 0x20) 16:11:29 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) 16:11:29 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x28000000) r0 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000000)={0x2, 0x800000000000004, 0x0, 0x28ad, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x0, 0x5, 0x7, 0xd}, 0x3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x9, 0x4, 0x100000001, 0x0, r1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0xff64, 0x0}, 0xffffffffffffff36) openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0}, 0x20) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="a000000076e71d0d6de02c7dfaa2c7ce8f48d4599dc614dee25df9b7e13d5a3635937fa60c94f89778692a483308bb94e29c8dd4e4c20e8176553b58f7ae533fb5ca43665830e05642085fef5b2fd8c584df8147459e354fd4052e7a0efcda9f9eb60f31077935852f4649c6d236cf2c107eae386da125836af65485427f5bd126ce20c986b2bb6f0c549ce98d7cd0bce006ce6fa508727ed6121209f588c43618f8"], &(0x7f0000000140)=0xa8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x10000, 0x0) recvfrom$rxrpc(0xffffffffffffffff, &(0x7f0000000200)=""/26, 0x1a, 0x40000163, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x35f) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304, 0x20000034}, "6bea63cff55aec7d", "75bea4bcb36bc7a4a4faf61bfd571eb48d8c6566c900", "55d92655", "d83442a879c4a318"}, 0x38) mq_getsetattr(r0, 0x0, &(0x7f00000003c0)) 16:11:29 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/185) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r4 = creat(0x0, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r7, 0x0) r8 = getpgid(0x0) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000010000000100000024000000000000000100000001000000f8ba947384f0f7622eb62a9dda0a351ddd30540c79f673b68147cffc3a25cc0508fc682932cac5258b608cb5e8eed72ddb5005293ec413f8d280f2449029cabd04", @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="36f56f4e1e4a71b5a4baaecf7a13fcae725d9bd7a967756caf56e22715e6438cc2bad2b5baed10ba60cb624e6d60b9af0a7f26d1269e903973d7cd5d4699d18f1bce29da3ddfaff36bf8fc0700000000000000a1fa14e2f720e21046800095d75f1bf6b1a02bfd7a7300205c8e79caf23ef13c6f79f96e639b1bc4e324b8c64c8dd6ce329e85958c7174cb783a2f52be049f3b143513c0", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b12f13dd408a604433f2f0bb3947c4100fd2b31f291b8803003b2112ed5f0900002c9a75c84c7937d701929507744fa022c4d62c050000"], 0x153, 0x2000c081}, 0x20000044) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x426000, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) ioctl$TUNSETOWNER(r9, 0x400454cc, r10) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x10000, r3, 0x0, r10, r11, 0x1, 0x1f}, 0xfffffffe, 0x10001, 0x8, 0x0, r12, 0x0, 0x5}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) creat(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x500000d) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'\x01\x00', 0x7}, 0xfdd1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000340)={0x9, 0x8, 0x0, 'queue0\x00', 0x13}) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x9, 0x0, 0x0, 0x80, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="66f8c4d4eae20c83eabe3ce534db24de968b2e09b64bc25559f14037106cb502d350b323798c3bf0cf8e3ba32b0644f7524c5c046f9d569dfcf05a1c19396416602f97ce27aa4542dc488bf69d62a42273d1f694c9c415be52ee3f50ec041ce858c48268a4cc013be6834e797114c5314516b0ea2d0f35fab020e7188a8c9c4acb7ff1357d2563d354423337f79c52892005c6046b3ad9d34494e1c7b1cf7cec1c056653eeb206f5117e1236c3752ff8149ce28a21cd556ebc", 0xb9}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x48a}, 0x0) 16:11:29 executing program 3: ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x381000) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000380)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x4, 0x1, 0x200000, 0x6, 0x211, r1, 0x3ff, [], 0x0, r2, 0x1, 0x2}, 0x3c) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0xf908, @mcast1}}}, 0x30) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000200)=ANY=[]) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000240)={{0x3}, 0x8, 0x2, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(0xffffffffffffffff, 0x4008ae73, &(0x7f00000000c0)={0x5eb2, 0x3}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r5, &(0x7f00000017c0), 0x33d, 0x9000000) 16:11:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f00000017c0), 0x33d, 0x0) 16:11:29 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000001d008105e00f80ecdb4cb9f207c804a01c000000060006000a0002000a0ada1b40d805000500c50083b8", 0xa4}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x3ff) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, 0x0, 0x264, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) ppoll(&(0x7f0000000000)=[{r1}, {r0, 0x3}], 0x2, 0x0, 0x0, 0x0) 16:11:29 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 16:11:29 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x22, 0x400, 0x0, 0x0, 0x0, 0x20000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f0000000300)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000000)=""/185) shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0x2000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) r4 = creat(0x0, 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141046, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f0000000440)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @mcast1, @loopback}) r7 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r7, 0x0) r8 = getpgid(0x0) sendmsg$unix(r4, &(0x7f0000000640)={&(0x7f0000000340)=@file={0x0, './bus\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000000000000010000000100000024000000000000000100000001000000f8ba947384f0f7622eb62a9dda0a351ddd30540c79f673b68147cffc3a25cc0508fc682932cac5258b608cb5e8eed72ddb5005293ec413f8d280f2449029cabd04", @ANYRES32=r5, @ANYRES32, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYBLOB="36f56f4e1e4a71b5a4baaecf7a13fcae725d9bd7a967756caf56e22715e6438cc2bad2b5baed10ba60cb624e6d60b9af0a7f26d1269e903973d7cd5d4699d18f1bce29da3ddfaff36bf8fc0700000000000000a1fa14e2f720e21046800095d75f1bf6b1a02bfd7a7300205c8e79caf23ef13c6f79f96e639b1bc4e324b8c64c8dd6ce329e85958c7174cb783a2f52be049f3b143513c0", @ANYRES32=r8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b12f13dd408a604433f2f0bb3947c4100fd2b31f291b8803003b2112ed5f0900002c9a75c84c7937d701929507744fa022c4d62c050000"], 0x153, 0x2000c081}, 0x20000044) r9 = openat$tun(0xffffffffffffff9c, 0x0, 0x426000, 0x0) getresuid(&(0x7f0000000380)=0x0, &(0x7f0000000400), &(0x7f0000000440)) ioctl$TUNSETOWNER(r9, 0x400454cc, r10) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000400)=0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x10000, r3, 0x0, r10, r11, 0x1, 0x1f}, 0xfffffffe, 0x10001, 0x8, 0x0, r12, 0x0, 0x5}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) creat(0x0, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x500000d) dup(0xffffffffffffffff) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, &(0x7f0000000080)={'\x01\x00', 0x7}, 0xfdd1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000340)={0x9, 0x8, 0x0, 'queue0\x00', 0x13}) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x9, 0x0, 0x0, 0x80, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f00000004c0)="66f8c4d4eae20c83eabe3ce534db24de968b2e09b64bc25559f14037106cb502d350b323798c3bf0cf8e3ba32b0644f7524c5c046f9d569dfcf05a1c19396416602f97ce27aa4542dc488bf69d62a42273d1f694c9c415be52ee3f50ec041ce858c48268a4cc013be6834e797114c5314516b0ea2d0f35fab020e7188a8c9c4acb7ff1357d2563d354423337f79c52892005c6046b3ad9d34494e1c7b1cf7cec1c056653eeb206f5117e1236c3752ff8149ce28a21cd556ebc", 0xb9}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x48a}, 0x0) 16:11:29 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0xfffffffffffffffc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0xfff, 0xc3129e7f096688be}, 0x0) write$binfmt_elf64(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="7fe84b7a12ccba9ecbaea5e8dd240c1e5d9836bb72b0f96a9cbad007f24b3ac25dc81c2b7c8c5b06d007e4c0072fab72c7d711beb15f4313966fe3a42d5e075205917f03000000030b6daa6e72f1f4f7e0614000000000000001a25a382ed7fbcbbc4e5508505d086e999137a3cd09a1d213854233b397b26fccb4cfb4e411c1dda85521b1ac0543976167e74735bfeb9297fafeb42c2cd4c4f6ba47288081d628de14a780b9508849401388f0f141673eaf22a12567ce2ce73a3f2c2ddaaf59b753"], 0xc2) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\r', 0x20000005002}) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r1, &(0x7f0000000040), 0xff66}]) openat$tun(0xffffffffffffff9c, &(0x7f0000000480)='/dev/net/tun\x00', 0x2, 0x0) 16:11:30 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)="a0a138a19844e259716af1241c49914c53d02fbea7754b6b861231882701594345", 0x21}], 0x1}], 0x1, 0x0) clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x4000000000000016, &(0x7f00000004c0)) ptrace(0x4206, r0) ptrace(0x4208, r0) ptrace$setregset(0x4205, r0, 0x0, 0x0) 16:11:30 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="9040", 0x2, 0x2004c8a1, 0x0, 0x0) read(r0, &(0x7f0000000080)=""/249, 0xf9) sendto$inet(r0, &(0x7f00000012c0)=' ', 0x1, 0x11, 0x0, 0x0) 16:11:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) 16:11:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000300)) [ 229.092474][ T9233] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:11:30 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000140)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) creat(&(0x7f0000000080)='./bus/file0\x00', 0x0) lstat(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f00000001c0)) 16:11:31 executing program 3: syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4a64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, 0xffffffffffffffff, 0x0) process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141c40) r0 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffee3) ioctl(r0, 0x0, 0x0) openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc0182101, 0x0) socket$alg(0x26, 0x5, 0x0) memfd_create(0x0, 0x0) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0x0) geteuid() getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8888, 0x0) shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_SET(0x0, 0x1, 0x0) getresgid(0x0, 0x0, &(0x7f0000000540)) setpriority(0x0, 0x0, 0x0) r1 = geteuid() io_setup(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000600)) socket$packet(0x11, 0x0, 0x300) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0x0, r1, 0xee01}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}) stat(&(0x7f0000000b40)='./file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f00000001c0)={0x1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc0182101, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc0182101, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc0182101, 0x0) getpgrp(0x0) setpriority(0x0, 0x0, 0xffff) getegid() syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc0182101, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc0182101, 0x0) geteuid() getpid() sched_setscheduler(0x0, 0x0, 0x0) shmget(0x3, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) getgid() getpid() sched_setscheduler(0x0, 0x0, 0x0) io_setup(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000600)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) shmget(0x3, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r4 = socket(0x11, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00'}) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc0182101, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000240)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) socket$packet(0x11, 0x0, 0x300) r5 = syz_open_dev$midi(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) accept$inet(r5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) geteuid() getpid() io_setup(0x0, &(0x7f0000000280)) syz_open_dev$usbmon(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000001c0)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, 0x0, 0x0) 16:11:31 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x2284, &(0x7f0000000300)) 16:11:31 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) [ 229.394489][ T9240] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 16:11:31 executing program 4: write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:11:31 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000004c0)="f21d83", 0x3) openat$null(0xffffffffffffff9c, &(0x7f0000000640)='/dev/null\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in=@local, @in6=@mcast2}}, {{@in6=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000540)=0x123) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 229.673343][ T9260] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 229.791770][ T9262] ptrace attach of "/root/syz-executor.1"[9227] was attempted by "/root/syz-executor.1"[9262] [ 380.284330][ T1085] INFO: task :9217 can't die for more than 143 seconds. [ 380.291524][ T1085] R running task 27784 9217 8919 0x00004006 [ 380.306460][ T1085] Call Trace: [ 380.309842][ T1085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.318256][ T1085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.323829][ T1085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.332325][ T1085] ? lockdep_hardirqs_on+0x421/0x5e0 [ 380.340567][ T1085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.349633][ T1085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.358804][ T1085] ? lockdep_hardirqs_on+0x421/0x5e0 [ 380.368286][ T1085] ? retint_kernel+0x2b/0x2b [ 380.372902][ T1085] ? trace_hardirqs_on_caller+0x6a/0x240 [ 380.381546][ T1085] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.390073][ T1085] ? __this_cpu_preempt_check+0x35/0x190 [ 380.399294][ T1085] ? apic_timer_interrupt+0xa/0x20 [ 380.407366][ T1085] ? irq_work_sync+0xd1/0x1d0 [ 380.412060][ T1085] ? irq_work_sync+0xd3/0x1d0 [ 380.419676][ T1085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.428832][ T1085] ? irq_work_sync+0xd1/0x1d0 [ 380.433516][ T1085] ? _free_event+0x89/0x13b0 [ 380.441027][ T1085] ? __kasan_check_write+0x14/0x20 [ 380.449110][ T1085] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 380.458003][ T1085] ? mark_held_locks+0xa4/0xf0 [ 380.462776][ T1085] ? ring_buffer_attach+0x650/0x650 [ 380.470995][ T1085] ? wait_for_completion+0x440/0x440 [ 380.479180][ T1085] ? put_event+0x47/0x60 [ 380.483433][ T1085] ? perf_event_release_kernel+0x6d5/0xd70 [ 380.492162][ T1085] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.501308][ T1085] ? __perf_event_exit_context+0x170/0x170 [ 380.510066][ T1085] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 380.519472][ T1085] ? perf_release+0x37/0x50 [ 380.528159][ T1085] ? __fput+0x2ff/0x890 [ 380.532362][ T1085] ? perf_event_release_kernel+0xd70/0xd70 [ 380.541139][ T1085] ? ____fput+0x16/0x20 [ 380.548222][ T1085] ? task_work_run+0x145/0x1c0 [ 380.553357][ T1085] ? exit_to_usermode_loop+0x316/0x380 [ 380.561750][ T1085] ? do_syscall_64+0x676/0x790 [ 380.569837][ T1085] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.578831][ T1085] [ 380.578831][ T1085] Showing all locks held in the system: [ 380.589632][ T1085] 1 lock held by khungtaskd/1085: [ 380.597640][ T1085] #0: ffffffff88faccc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 380.612582][ T1085] 1 lock held by rsyslogd/8788: [ 380.620431][ T1085] #0: ffff8880a616a8a0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 380.631966][ T1085] 2 locks held by getty/8878: [ 380.639516][ T1085] #0: ffff8880a77b5090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.651387][ T1085] #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.663988][ T1085] 2 locks held by getty/8879: [ 380.671680][ T1085] #0: ffff88809a318090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.683933][ T1085] #1: ffffc90005f3f2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.700012][ T1085] 2 locks held by getty/8880: [ 380.705135][ T1085] #0: ffff8880a8f6a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.719814][ T1085] #1: ffffc90005f1d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.730122][ T1085] 2 locks held by getty/8881: [ 380.740488][ T1085] #0: ffff888097758090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.749627][ T1085] #1: ffffc90005f432e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.764918][ T1085] 2 locks held by getty/8882: [ 380.769597][ T1085] #0: ffff88809988c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.783302][ T1085] #1: ffffc90005f3b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.799291][ T1085] 2 locks held by getty/8883: [ 380.803976][ T1085] #0: ffff8880a02c8090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.813113][ T1085] #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.828767][ T1085] 2 locks held by getty/8884: [ 380.833452][ T1085] #0: ffff88808f8c5090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 380.843509][ T1085] #1: ffffc90005f112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 380.859868][ T1085] [ 380.862214][ T1085] ============================================= [ 380.862214][ T1085] [ 380.870888][ T1085] NMI backtrace for cpu 1 [ 380.875324][ T1085] CPU: 1 PID: 1085 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0 [ 380.883899][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.894203][ T1085] Call Trace: [ 380.897553][ T1085] dump_stack+0x197/0x210 [ 380.901882][ T1085] nmi_cpu_backtrace.cold+0x70/0xb2 [ 380.907072][ T1085] ? vprintk_func+0x86/0x189 [ 380.911658][ T1085] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 380.917285][ T1085] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 380.923262][ T1085] arch_trigger_cpumask_backtrace+0x14/0x20 [ 380.929148][ T1085] watchdog+0xc8f/0x1350 [ 380.933391][ T1085] kthread+0x361/0x430 [ 380.937452][ T1085] ? reset_hung_task_detector+0x30/0x30 [ 380.942994][ T1085] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 380.948732][ T1085] ret_from_fork+0x24/0x30 [ 380.953340][ T1085] Sending NMI from CPU 1 to CPUs 0: [ 380.959034][ C0] NMI backtrace for cpu 0 [ 380.959039][ C0] CPU: 0 PID: 9217 Comm: Not tainted 5.4.0-rc7-next-20191115 #0 [ 380.959044][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.959048][ C0] RIP: 0010:lock_is_held_type+0x254/0x320 [ 380.959058][ C0] Code: 83 c0 03 38 d0 7c 08 84 d2 0f 85 d3 00 00 00 48 c7 c0 58 2e f3 88 48 ba 00 00 00 00 00 fc ff df c7 83 9c 08 00 00 00 00 00 00 <48> c1 e8 03 80 3c 10 00 0f 85 88 00 00 00 48 83 3d 7e db 99 07 00 [ 380.959062][ C0] RSP: 0018:ffff8880ae809ef0 EFLAGS: 00000046 [ 380.959069][ C0] RAX: ffffffff88f32e58 RBX: ffff88809aa8e6c0 RCX: 0000000000000000 [ 380.959073][ C0] RDX: dffffc0000000000 RSI: 00000000ffffffff RDI: ffff88809aa8ef5c [ 380.959078][ C0] RBP: ffff8880ae809f38 R08: ffff88809aa8e6c0 R09: ffffed1015d0703d [ 380.959082][ C0] R10: ffffed1015d0703c R11: ffff8880ae8381e3 R12: 0000000000000000 [ 380.959087][ C0] R13: 0000000000000000 R14: ffffffff88facc40 R15: 0000000000000000 [ 380.959098][ C0] FS: 00007f7da08fd700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 380.959102][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 380.959107][ C0] CR2: ffffffffff600400 CR3: 0000000095454000 CR4: 00000000001406f0 [ 380.959111][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.959116][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 380.959118][ C0] Call Trace: [ 380.959120][ C0] [ 380.959124][ C0] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 380.959127][ C0] rcu_read_lock_sched_held+0x9c/0xd0 [ 380.959131][ C0] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 380.959134][ C0] smp_apic_timer_interrupt+0x476/0x610 [ 380.959137][ C0] apic_timer_interrupt+0xf/0x20 [ 380.959140][ C0] [ 380.959143][ C0] RIP: 0010:irq_work_sync+0xd3/0x1d0 [ 380.959153][ C0] Code: f5 ff 4d 89 e6 4d 89 e5 48 b8 00 00 00 00 00 fc ff df 49 c1 ee 03 41 83 e5 07 49 01 c6 41 83 c5 03 eb 07 e8 7f 87 f5 ff f3 90 78 87 f5 ff be 04 00 00 00 4c 89 e7 e8 ab a6 31 00 41 0f b6 06 [ 380.959156][ C0] RSP: 0018:ffff8880553e7c08 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 380.959164][ C0] RAX: 0000000000040000 RBX: 0000000000000002 RCX: ffffc9000a580000 [ 380.959169][ C0] RDX: 0000000000040000 RSI: ffffffff817e51c1 RDI: 0000000000000005 [ 380.959173][ C0] RBP: ffff8880553e7c28 R08: ffff88809aa8e6c0 R09: ffffed101244a282 [ 380.959178][ C0] R10: ffffed101244a281 R11: ffff88809225140b R12: ffff888092251408 [ 380.959182][ C0] R13: 0000000000000003 R14: ffffed101244a281 R15: ffff8880553e7cc8 [ 380.959185][ C0] ? irq_work_sync+0xd1/0x1d0 [ 380.959189][ C0] ? irq_work_sync+0xd1/0x1d0 [ 380.959191][ C0] _free_event+0x89/0x13b0 [ 380.959195][ C0] ? __kasan_check_write+0x14/0x20 [ 380.959198][ C0] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 380.959201][ C0] ? mark_held_locks+0xa4/0xf0 [ 380.959205][ C0] ? ring_buffer_attach+0x650/0x650 [ 380.959208][ C0] ? wait_for_completion+0x440/0x440 [ 380.959211][ C0] put_event+0x47/0x60 [ 380.959214][ C0] perf_event_release_kernel+0x6d5/0xd70 [ 380.959218][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.959222][ C0] ? __perf_event_exit_context+0x170/0x170 [ 380.959225][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 380.959228][ C0] perf_release+0x37/0x50 [ 380.959231][ C0] __fput+0x2ff/0x890 [ 380.959235][ C0] ? perf_event_release_kernel+0xd70/0xd70 [ 380.959237][ C0] ____fput+0x16/0x20 [ 380.959240][ C0] task_work_run+0x145/0x1c0 [ 380.959244][ C0] exit_to_usermode_loop+0x316/0x380 [ 380.959247][ C0] do_syscall_64+0x676/0x790 [ 380.959250][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.959253][ C0] RIP: 0033:0x45a639 [ 380.959263][ C0] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.959266][ C0] RSP: 002b:00007f7da08fcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 380.959274][ C0] RAX: 0000000020000000 RBX: 0000000000000006 RCX: 000000000045a639 [ 380.959278][ C0] RDX: 0000000000010006 RSI: 0000000000003000 RDI: 0000000020000000 [ 380.959283][ C0] RBP: 000000000075bfc8 R08: 0000000000000003 R09: 0000000000000000 [ 380.959287][ C0] R10: 0000000000080011 R11: 0000000000000246 R12: 00007f7da08fd6d4 [ 380.959292][ C0] R13: 00000000004c705c R14: 00000000004dc7f8 R15: 00000000ffffffff [ 380.966548][ T1085] Kernel panic - not syncing: hung_task: blocked tasks [ 381.387808][ T1085] CPU: 1 PID: 1085 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0 [ 381.396380][ T1085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.406426][ T1085] Call Trace: [ 381.409721][ T1085] dump_stack+0x197/0x210 [ 381.414051][ T1085] panic+0x2e3/0x75c [ 381.417942][ T1085] ? add_taint.cold+0x16/0x16 [ 381.422618][ T1085] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 381.428246][ T1085] ? ___preempt_schedule+0x16/0x18 [ 381.433353][ T1085] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 381.439501][ T1085] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 381.445661][ T1085] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 381.451822][ T1085] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 381.457977][ T1085] watchdog+0xca0/0x1350 [ 381.462230][ T1085] kthread+0x361/0x430 [ 381.466304][ T1085] ? reset_hung_task_detector+0x30/0x30 [ 381.471840][ T1085] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 381.477568][ T1085] ret_from_fork+0x24/0x30 [ 381.483609][ T1085] Kernel Offset: disabled [ 381.487984][ T1085] Rebooting in 86400 seconds..