[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 48.782639][ T26] audit: type=1800 audit(1561294234.738:25): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 48.825406][ T26] audit: type=1800 audit(1561294234.748:26): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 48.860502][ T26] audit: type=1800 audit(1561294234.748:27): pid=8140 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.203' (ECDSA) to the list of known hosts. 2019/06/23 12:50:46 fuzzer started 2019/06/23 12:50:49 dialing manager at 10.128.0.26:39885 2019/06/23 12:50:49 syscalls: 2465 2019/06/23 12:50:49 code coverage: enabled 2019/06/23 12:50:49 comparison tracing: enabled 2019/06/23 12:50:49 extra coverage: extra coverage is not supported by the kernel 2019/06/23 12:50:49 setuid sandbox: enabled 2019/06/23 12:50:49 namespace sandbox: enabled 2019/06/23 12:50:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/06/23 12:50:49 fault injection: enabled 2019/06/23 12:50:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/06/23 12:50:49 net packet injection: enabled 2019/06/23 12:50:49 net device setup: enabled 12:52:09 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000380)=""/246) ioctl$UI_SET_FFBIT(r0, 0x40107447, 0x0) syzkaller login: [ 143.153682][ T8308] IPVS: ftp: loaded support on port[0] = 21 12:52:09 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x3c}, 0x0, @in6=@dev}}, 0xe8) dup2(r0, r1) [ 143.309423][ T8308] chnl_net:caif_netlink_parms(): no params data found [ 143.378650][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.386938][ T8308] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.396314][ T8308] device bridge_slave_0 entered promiscuous mode [ 143.406373][ T8308] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.413543][ T8308] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.422586][ T8308] device bridge_slave_1 entered promiscuous mode [ 143.442348][ T8311] IPVS: ftp: loaded support on port[0] = 21 [ 143.451987][ T8308] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 143.463053][ T8308] bond0: Enslaving bond_slave_1 as an active interface with an up link 12:52:09 executing program 2: mremap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000000a000/0x1000)=nil) madvise(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x11) [ 143.489245][ T8308] team0: Port device team_slave_0 added [ 143.499812][ T8308] team0: Port device team_slave_1 added 12:52:09 executing program 3: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x2, 0x1, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x4048000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000002c0)={0x1, 0x8, 0xba61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d26d4cc, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) [ 143.728045][ T8308] device hsr_slave_0 entered promiscuous mode [ 143.775643][ T8308] device hsr_slave_1 entered promiscuous mode [ 143.831250][ T8313] IPVS: ftp: loaded support on port[0] = 21 [ 143.834641][ T8315] IPVS: ftp: loaded support on port[0] = 21 [ 143.871784][ T8308] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.879218][ T8308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.887416][ T8308] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.894523][ T8308] bridge0: port 1(bridge_slave_0) entered forwarding state 12:52:10 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x62}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) [ 144.115940][ T8308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.164729][ T8311] chnl_net:caif_netlink_parms(): no params data found [ 144.182399][ T8308] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.255912][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.277716][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.297975][ T5] bridge0: port 2(bridge_slave_1) entered disabled state 12:52:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xf, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x57, 0x57}}, &(0x7f0000000000)='syzkaller\x00'}, 0x48) [ 144.308174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 144.341999][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 144.360130][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.369856][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.376989][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.386566][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.396959][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.404124][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.419034][ T8321] IPVS: ftp: loaded support on port[0] = 21 [ 144.435298][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 144.444201][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 144.459053][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 144.468610][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 144.477890][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 144.513862][ T8315] chnl_net:caif_netlink_parms(): no params data found [ 144.553951][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 144.563718][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.573853][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.591511][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.598774][ T8311] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.608311][ T8311] device bridge_slave_0 entered promiscuous mode [ 144.628803][ T8324] IPVS: ftp: loaded support on port[0] = 21 [ 144.640699][ T8308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.653205][ T8308] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 144.668501][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.677312][ T8311] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.685030][ T8311] device bridge_slave_1 entered promiscuous mode [ 144.701725][ T8315] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.709212][ T8315] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.717470][ T8315] device bridge_slave_0 entered promiscuous mode [ 144.728238][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.737991][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.765053][ T8315] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.772383][ T8315] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.781820][ T8315] device bridge_slave_1 entered promiscuous mode [ 144.811563][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.819736][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.828375][ T8313] device bridge_slave_0 entered promiscuous mode [ 144.838125][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.846223][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.853860][ T8313] device bridge_slave_1 entered promiscuous mode [ 144.862599][ T8311] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.873601][ T8311] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.886491][ T8315] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.897240][ T8315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 144.950325][ T8311] team0: Port device team_slave_0 added [ 144.966293][ T8315] team0: Port device team_slave_0 added [ 144.973892][ T8315] team0: Port device team_slave_1 added [ 144.982299][ T8313] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 144.994506][ T8311] team0: Port device team_slave_1 added [ 145.005969][ T8313] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 145.118838][ T8311] device hsr_slave_0 entered promiscuous mode [ 145.155798][ T8311] device hsr_slave_1 entered promiscuous mode [ 145.229700][ T8308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.287485][ T8315] device hsr_slave_0 entered promiscuous mode [ 145.345661][ T8315] device hsr_slave_1 entered promiscuous mode [ 145.387481][ T8313] team0: Port device team_slave_0 added [ 145.394656][ T8313] team0: Port device team_slave_1 added [ 145.477866][ T8313] device hsr_slave_0 entered promiscuous mode [ 145.525777][ T8313] device hsr_slave_1 entered promiscuous mode [ 145.674039][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 145.768340][ T8324] chnl_net:caif_netlink_parms(): no params data found 12:52:11 executing program 0: r0 = socket(0x10, 0x1000040000000003, 0x0) write(r0, &(0x7f00000000c0)="22000000140007058d000005004c0304020803130100000007000200410909e376ab", 0x22) [ 145.829551][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.838715][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.847164][ T8321] device bridge_slave_0 entered promiscuous mode [ 145.890879][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.898437][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.907545][ T8321] device bridge_slave_1 entered promiscuous mode [ 145.949364][ T8324] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.957430][ T8324] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.967101][ T8324] device bridge_slave_0 entered promiscuous mode [ 145.974821][ T8324] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.982618][ T8324] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.990471][ T8324] device bridge_slave_1 entered promiscuous mode [ 146.009142][ T8338] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 146.019678][ T8321] bond0: Enslaving bond_slave_0 as an active interface with an up link 12:52:12 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x3a, 0xf0ffff, @ipv4={[0x2, 0x2, 0x543, 0x0, 0x60], [], @multicast2}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x300]}, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x7, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) [ 146.050361][ T8324] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 146.062049][ T8321] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.080394][ T8315] 8021q: adding VLAN 0 to HW filter on device bond0 12:52:12 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) [ 146.097875][ T8313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.107265][ T8324] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 146.162317][ T8313] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.177640][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.186222][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.194007][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.203720][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.212897][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.220070][ T2808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.233602][ T8319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.245169][ C1] hrtimer: interrupt took 38237 ns [ 146.254472][ T8321] team0: Port device team_slave_0 added [ 146.262539][ T8321] team0: Port device team_slave_1 added [ 146.292977][ T8324] team0: Port device team_slave_0 added [ 146.300267][ T8324] team0: Port device team_slave_1 added [ 146.323905][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.333231][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.341815][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.348928][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.360640][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.375055][ T8311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.392335][ T8315] 8021q: adding VLAN 0 to HW filter on device team0 12:52:12 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) [ 146.445778][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.454024][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.470197][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.482598][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 146.498170][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 146.514844][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 146.526974][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.538930][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.548717][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.566047][ T8311] 8021q: adding VLAN 0 to HW filter on device team0 12:52:12 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) [ 146.638397][ T8324] device hsr_slave_0 entered promiscuous mode [ 146.676096][ T8324] device hsr_slave_1 entered promiscuous mode 12:52:12 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @dev, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000005b40), 0x40000000000014d, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$packet(0x11, 0x400000000000002, 0x300) 12:52:12 executing program 0: r0 = socket$inet(0x2b, 0x1, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) [ 146.778113][ T8321] device hsr_slave_0 entered promiscuous mode [ 146.816302][ T8321] device hsr_slave_1 entered promiscuous mode [ 146.865735][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.877155][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 146.885061][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 146.905768][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.914464][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.922980][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.930046][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.938187][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.946906][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.955420][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.962501][ T3541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.970277][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 146.979402][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 146.988935][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.019348][ T8313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.029117][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.039317][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.047774][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.054974][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.062919][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.071763][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.080330][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.089218][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.098091][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.105220][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.112803][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.121528][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.130400][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.138555][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.183904][ T8315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.196207][ T8315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.208860][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.218021][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.226683][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.235489][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.244164][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.254268][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.263254][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.272106][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 147.281039][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.289783][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.299218][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.307031][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.332937][ T8311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 147.344140][ T8311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.375792][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 147.384463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 147.396757][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 147.405109][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 147.414493][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 147.429395][ T8313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.447190][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.463416][ T8311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.535711][ T8324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.552937][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.572362][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.581883][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.599355][ T8324] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.633401][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 147.642715][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.652428][ T2808] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.660341][ T2808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.671073][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 147.680744][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 147.702197][ T2808] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.709387][ T2808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.718143][ T2808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 147.756572][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.777943][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.804558][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 147.830599][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 147.851039][ T3541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.906916][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.924255][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.946515][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 12:52:13 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip={{0xc, 0x1, 'ipip\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_ENCAP_TYPE={0x8, 0xa, 0x3}]]}}}]}, 0x3c}}, 0x0) 12:52:13 executing program 0: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144aff0ae9", 0x12, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000002400)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/147, 0x93}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x3}, 0x0) [ 147.961750][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 147.981741][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.988958][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.006001][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.023288][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.034009][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 148.043048][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 148.051626][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.058833][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.068377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.077554][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.086615][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 148.098630][ T8324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.110643][ T8324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.142235][ T8385] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 148.153657][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 148.170963][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 148.182192][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.193911][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.204666][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 148.217251][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 148.226368][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 148.235070][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 148.244909][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.253377][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.261944][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.271079][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 12:52:14 executing program 3: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x2, 0x1, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x4048000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000002c0)={0x1, 0x8, 0xba61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d26d4cc, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) [ 148.293695][ T8319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.330934][ T8319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.353716][ T8321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 148.391730][ T8324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.429322][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 12:52:14 executing program 4: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r0) quotactl(0x2080000201, &(0x7f0000000040)='./file1/../file0\x00', 0x0, &(0x7f0000000280)='-0') 12:52:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xfffffcfd}]) 12:52:14 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:14 executing program 3: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x2, 0x1, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x4048000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000002c0)={0x1, 0x8, 0xba61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d26d4cc, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) 12:52:14 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) dup2(r1, r0) 12:52:14 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180)=0x6f7bbbe1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:52:14 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xfffffcfd}]) 12:52:14 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:14 executing program 3: unshare(0x600) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000040)={0x2, 0x1, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000180)}], 0x1}}], 0x1, 0x4048000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000002c0)={0x1, 0x8, 0xba61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d26d4cc, 0x7}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @local}}) [ 148.900575][ T8434] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 12:52:15 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:15 executing program 4: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180)=0x6f7bbbe1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:52:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xfffffcfd}]) 12:52:15 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:15 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:15 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x4, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0xfffffcfd}]) 12:52:15 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180)=0x6f7bbbe1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:52:15 executing program 5: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:15 executing program 0: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0x4, 0x0, 0x1, 0x1f, 0x0, 0x7fffffff, 0x200, 0x1, 0x180000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x40, 0x1ec9ec09, 0x0, 0xffffffffffff1c09, 0x5, 0x0, 0x6, 0xffff, 0x80, 0xe416, 0x0, 0x0, 0x9, 0x0, 0x40, 0x80000001, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7}, 0x800, 0x0, 0xa, 0xd, 0x4}, r0, 0x4, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) epoll_wait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fb, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 12:52:15 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:15 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:15 executing program 4: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:15 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x6, 0x1ff}]}}, &(0x7f00000001c0)=""/157, 0x26, 0x9d, 0x1}, 0x20) 12:52:16 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000180)=0x6f7bbbe1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x44000102, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 12:52:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:52:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:16 executing program 5: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:16 executing program 2: io_uring_setup(0x12c, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}) 12:52:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:52:16 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:16 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"]) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001) 12:52:16 executing program 4: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:16 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0xb, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r1 = perf_event_open(&(0x7f0000000040)={0x21, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x800000000, 0x5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9587, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe01) socket$inet6(0xa, 0x2, 0x4b31) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000440)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000004c0)) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@empty, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r8 = dup3(r0, r7, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5452ae4ec1a377b4eb763893cbb396aa12e33814a23d86d1f2644115bd0b6e81191a76415cff9cba07449bcac0abbaea62238fc243816ba7f1fff14ac1b1e061867c68134a357cbcf9a0626e63d92e02218174337c49a6b2131f5aa516b50e7497b0a4e31226a3ba053972a89b15c62b59ab7623be0328b875881ce6da5054f7013bcd5570f8c2d8ef70683e18bb4cbdfc2db575030260b3f65a6c9abaa9077a0475dbef8bdad7fdc63e37e361ae89cac4df8e7930d4c23faedb09d2a90c88b91b8442f90223035ea7c1f35e"], 0xcc}}, 0x4000001) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) 12:52:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:52:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:52:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x802) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)={0x4000100323, 0x4, 0x0, 0x0, 0x0, 0x200000000000000}) [ 150.901164][ T8546] bridge0: port 3(gretap0) entered blocking state [ 150.977340][ T8546] bridge0: port 3(gretap0) entered disabled state [ 151.073308][ T8546] device gretap0 entered promiscuous mode [ 151.079766][ T8546] bridge0: port 3(gretap0) entered blocking state [ 151.086277][ T8546] bridge0: port 3(gretap0) entered forwarding state 12:52:17 executing program 5: r0 = inotify_init() r1 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000140)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) listen(r2, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = accept4(r2, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x2) close(r4) 12:52:17 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a0440a32e9cd1c14"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x1, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "244e208387e3322b"}}, 0x20000078}}, 0x0) 12:52:17 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0xb, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r1 = perf_event_open(&(0x7f0000000040)={0x21, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x800000000, 0x5, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9587, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe01) socket$inet6(0xa, 0x2, 0x4b31) ioctl(r1, 0x10001, &(0x7f0000000100)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r4 = socket(0xa, 0x3, 0x8) r5 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000440)=r6) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f00000004c0)) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @remote, 0x4e24, 0x0, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@empty, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r7 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) write$binfmt_misc(r3, &(0x7f0000000c40)=ANY=[], 0x0) close(r2) r8 = dup3(r0, r7, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000280)={0x7fff, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@ipv4_newrule={0x2c, 0x20, 0xf29, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5452ae4ec1a377b4eb763893cbb396aa12e33814a23d86d1f2644115bd0b6e81191a76415cff9cba07449bcac0abbaea62238fc243816ba7f1fff14ac1b1e061867c68134a357cbcf9a0626e63d92e02218174337c49a6b2131f5aa516b50e7497b0a4e31226a3ba053972a89b15c62b59ab7623be0328b875881ce6da5054f7013bcd5570f8c2d8ef70683e18bb4cbdfc2db575030260b3f65a6c9abaa9077a0475dbef8bdad7fdc63e37e361ae89cac4df8e7930d4c23faedb09d2a90c88b91b8442f90223035ea7c1f35e"], 0xcc}}, 0x4000001) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) [ 311.115531][ T1043] INFO: task syz-executor.2:8528 blocked for more than 143 seconds. [ 311.123785][ T1043] Not tainted 5.2.0-rc5+ #5 [ 311.129357][ T1043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 311.138302][ T1043] syz-executor.2 D25632 8528 8313 0x00004004 [ 311.144828][ T1043] Call Trace: [ 311.148399][ T1043] __schedule+0x658/0x9e0 [ 311.152853][ T1043] ? is_mmconf_reserved+0x410/0x410 [ 311.158224][ T1043] ? is_dynamic_key+0x1c0/0x1c0 [ 311.163521][ T1043] schedule+0x131/0x1d0 [ 311.167884][ T1043] schedule_timeout+0x9a/0x2b0 [ 311.172674][ T1043] ? console_conditional_schedule+0x40/0x40 [ 311.178779][ T1043] ? _raw_spin_unlock_irq+0x27/0x80 [ 311.183993][ T1043] do_wait_for_common+0x35e/0x5a0 [ 311.189132][ T1043] ? console_conditional_schedule+0x40/0x40 [ 311.195052][ T1043] ? wait_for_completion_killable_timeout+0x60/0x60 [ 311.202298][ T1043] ? do_task_dead+0xc0/0xc0 [ 311.206904][ T1043] ? wait_for_completion+0x29/0x60 [ 311.212053][ T1043] wait_for_completion+0x47/0x60 [ 311.217130][ T1043] kthread_stop+0xb4/0x150 [ 311.221597][ T1043] io_ring_ctx_wait_and_kill+0x268/0x880 [ 311.227333][ T1043] ? io_uring_fasync+0x60/0x60 [ 311.232222][ T1043] ? fsnotify_nameremove+0x2a0/0x2a0 [ 311.237663][ T1043] io_uring_release+0x5d/0x70 [ 311.242500][ T1043] ? io_uring_mmap+0x2f0/0x2f0 [ 311.247410][ T1043] __fput+0x2e4/0x740 [ 311.252549][ T1043] ____fput+0x15/0x20 [ 311.256650][ T1043] task_work_run+0x17e/0x1b0 [ 311.261464][ T1043] prepare_exit_to_usermode+0x402/0x4f0 [ 311.267360][ T1043] syscall_return_slowpath+0x110/0x440 [ 311.273333][ T1043] do_syscall_64+0x126/0x140 [ 311.278187][ T1043] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.284120][ T1043] RIP: 0033:0x412fb1 [ 311.288280][ T1043] Code: 75 52 0f b6 19 48 ff c1 0f ba e3 00 73 de 48 89 54 24 20 89 5c 24 1c 48 89 4c 24 38 48 8b 44 24 68 48 8d 0c 02 48 8b 5c 24 60 <48> 8d 34 1a 48 8b 09 48 89 4c 24 08 48 89 34 24 e8 9a ea ff ff 48 [ 311.308364][ T1043] RSP: 002b:00007ffe3b5460c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 311.316885][ T1043] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000412fb1 [ 311.324974][ T1043] RDX: 0000001b33420000 RSI: 0000000000000000 RDI: 0000000000000003 [ 311.333194][ T1043] RBP: 0000000000000001 R08: 00000000f3a3e1f8 R09: 00000000f3a3e1fc [ 311.341348][ T1043] R10: 00007ffe3b5461a0 R11: 0000000000000293 R12: 00000000007604b0 [ 311.349418][ T1043] R13: 0000000000024bdc R14: 0000000000024c09 R15: 000000000075bf2c [ 311.357568][ T1043] [ 311.357568][ T1043] Showing all locks held in the system: [ 311.365423][ T1043] 2 locks held by kworker/u4:3/314: [ 311.370707][ T1043] #0: 00000000391bbff2 (&rq->lock){-.-.}, at: pick_next_task_fair+0x9f8/0x1bf0 [ 311.379887][ T1043] #1: 000000004cb27c92 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 [ 311.388997][ T1043] 1 lock held by khungtaskd/1043: [ 311.394024][ T1043] #0: 000000004cb27c92 (rcu_read_lock){....}, at: rcu_lock_acquire+0x4/0x30 [ 311.403078][ T1043] 2 locks held by rsyslogd/8178: [ 311.408277][ T1043] #0: 000000000bf3f08b (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x243/0x2e0 [ 311.417190][ T1043] #1: 000000000f039021 (logbuf_lock){-.-.}, at: do_syslog+0x125b/0x16c0 [ 311.425718][ T1043] 2 locks held by getty/8268: [ 311.430392][ T1043] #0: 000000001d41c3bf (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.439803][ T1043] #1: 00000000299c6212 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.449561][ T1043] 2 locks held by getty/8269: [ 311.454238][ T1043] #0: 00000000f62fe1cc (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.463809][ T1043] #1: 000000006e84e913 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.473487][ T1043] 2 locks held by getty/8270: [ 311.478265][ T1043] #0: 000000003498fde0 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.487626][ T1043] #1: 000000008c7befbb (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.497294][ T1043] 2 locks held by getty/8271: [ 311.502007][ T1043] #0: 0000000079e84b11 (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.511523][ T1043] #1: 0000000046be5337 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.521166][ T1043] 2 locks held by getty/8272: [ 311.525935][ T1043] #0: 0000000044ff3ece (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.535346][ T1043] #1: 00000000621e3645 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.545079][ T1043] 2 locks held by getty/8273: [ 311.549848][ T1043] #0: 00000000c5be547a (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.559386][ T1043] #1: 00000000c86ee81e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.569062][ T1043] 2 locks held by getty/8274: [ 311.573875][ T1043] #0: 00000000933d907b (&tty->ldisc_sem){++++}, at: tty_ldisc_ref_wait+0x25/0x70 [ 311.583347][ T1043] #1: 000000004b44ec3c (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x2ee/0x1c80 [ 311.607775][ T1043] [ 311.610121][ T1043] ============================================= [ 311.610121][ T1043] [ 311.618807][ T1043] NMI backtrace for cpu 1 [ 311.623171][ T1043] CPU: 1 PID: 1043 Comm: khungtaskd Not tainted 5.2.0-rc5+ #5 [ 311.630721][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.640922][ T1043] Call Trace: [ 311.644226][ T1043] dump_stack+0x1d8/0x2f8 [ 311.648554][ T1043] nmi_cpu_backtrace+0x89/0x160 [ 311.653436][ T1043] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 311.659556][ T1043] nmi_trigger_cpumask_backtrace+0x125/0x230 [ 311.665548][ T1043] arch_trigger_cpumask_backtrace+0x10/0x20 [ 311.671676][ T1043] trigger_all_cpu_backtrace+0x17/0x20 [ 311.677120][ T1043] watchdog+0xbb9/0xbd0 [ 311.681347][ T1043] kthread+0x325/0x350 [ 311.685400][ T1043] ? hungtask_pm_notify+0x50/0x50 [ 311.690416][ T1043] ? kthread_blkcg+0xe0/0xe0 [ 311.694997][ T1043] ret_from_fork+0x24/0x30 [ 311.699528][ T1043] Sending NMI from CPU 1 to CPUs 0: [ 311.704980][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 311.705835][ T1043] Kernel panic - not syncing: hung_task: blocked tasks [ 311.720098][ T1043] CPU: 1 PID: 1043 Comm: khungtaskd Not tainted 5.2.0-rc5+ #5 [ 311.727658][ T1043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.737700][ T1043] Call Trace: [ 311.740985][ T1043] dump_stack+0x1d8/0x2f8 [ 311.745308][ T1043] panic+0x28a/0x7c9 [ 311.749196][ T1043] ? check_preemption_disabled+0x3a/0x280 [ 311.755003][ T1043] ? find_next_bit+0x10c/0x120 [ 311.759763][ T1043] ? nmi_trigger_cpumask_backtrace+0x1b9/0x230 [ 311.765919][ T1043] ? nmi_panic+0x97/0x97 [ 311.770165][ T1043] ? nmi_trigger_cpumask_backtrace+0x1c2/0x230 [ 311.776308][ T1043] watchdog+0xbcc/0xbd0 [ 311.780508][ T1043] kthread+0x325/0x350 [ 311.784570][ T1043] ? hungtask_pm_notify+0x50/0x50 [ 311.789577][ T1043] ? kthread_blkcg+0xe0/0xe0 [ 311.794142][ T1043] ret_from_fork+0x24/0x30 [ 311.800038][ T1043] Kernel Offset: disabled [ 311.804513][ T1043] Rebooting in 86400 seconds..