[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   63.365429][   T26] audit: type=1800 audit(1574015575.704:25): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   63.396532][   T26] audit: type=1800 audit(1574015575.704:26): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   63.439731][   T26] audit: type=1800 audit(1574015575.704:27): pid=8686 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.16' (ECDSA) to the list of known hosts.
2019/11/17 18:33:05 fuzzer started
2019/11/17 18:33:07 dialing manager at 10.128.0.26:44591
2019/11/17 18:33:08 syscalls: 2566
2019/11/17 18:33:08 code coverage: enabled
2019/11/17 18:33:08 comparison tracing: enabled
2019/11/17 18:33:08 extra coverage: enabled
2019/11/17 18:33:08 setuid sandbox: enabled
2019/11/17 18:33:08 namespace sandbox: enabled
2019/11/17 18:33:08 Android sandbox: /sys/fs/selinux/policy does not exist
2019/11/17 18:33:08 fault injection: enabled
2019/11/17 18:33:08 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/11/17 18:33:08 net packet injection: enabled
2019/11/17 18:33:08 net device setup: enabled
2019/11/17 18:33:08 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/11/17 18:33:08 devlink PCI setup: PCI device 0000:00:10.0 is not available
18:36:01 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x88)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)

18:36:01 executing program 1:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000600)='+lo.cpusetvboxnet1&\x00', 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '+lo.cpusetvboxnet1&\x00'}, &(0x7f00000000c0)='osx.', 0x4, 0x1)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x200)
mmap(&(0x7f00000d3000/0x3000)=nil, 0x3000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setresgid(0x0, 0xee00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0)

syzkaller login: [  249.570502][ T8853] IPVS: ftp: loaded support on port[0] = 21
18:36:02 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(r2)

[  249.759317][ T8855] IPVS: ftp: loaded support on port[0] = 21
[  249.838225][ T8853] chnl_net:caif_netlink_parms(): no params data found
[  249.973322][ T8853] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.975200][ T8858] IPVS: ftp: loaded support on port[0] = 21
[  249.996848][ T8853] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.005425][ T8853] device bridge_slave_0 entered promiscuous mode
[  250.045516][ T8853] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.053182][ T8853] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.061705][ T8853] device bridge_slave_1 entered promiscuous mode
18:36:02 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x14, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x2}]}}}]}, 0x44}}, 0x0)

[  250.095881][ T8855] chnl_net:caif_netlink_parms(): no params data found
[  250.157844][ T8853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.180763][ T8853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.274825][ T8853] team0: Port device team_slave_0 added
[  250.291919][ T8855] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.299366][ T8855] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.317296][ T8855] device bridge_slave_0 entered promiscuous mode
[  250.326496][ T8853] team0: Port device team_slave_1 added
[  250.344059][ T8855] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.366582][ T8855] bridge0: port 2(bridge_slave_1) entered disabled state
18:36:02 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
socket$inet6(0xa, 0x0, 0x0)
pipe(&(0x7f0000000200))
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00')
readv(r0, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1)
readv(r0, &(0x7f0000000580), 0x3c1)

[  250.374720][ T8855] device bridge_slave_1 entered promiscuous mode
[  250.403775][ T8861] IPVS: ftp: loaded support on port[0] = 21
[  250.479722][ T8853] device hsr_slave_0 entered promiscuous mode
[  250.536680][ T8853] device hsr_slave_1 entered promiscuous mode
18:36:03 executing program 5:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
memfd_create(&(0x7f0000000600)='+lo.cpusetvboxnet1&\x00', 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'osx.', '+lo.cpusetvboxnet1&\x00'}, &(0x7f00000000c0)='osx.', 0x4, 0x1)
mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
unlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x0)
mmap(&(0x7f00000d3000/0x3000)=nil, 0x3000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
setresgid(0x0, 0xee00, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000180)='./file1\x00', 0x0)

[  250.644717][ T8855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  250.661742][ T8863] IPVS: ftp: loaded support on port[0] = 21
[  250.705191][ T8855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  250.743613][ T8853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  250.790866][ T8853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  250.853705][ T8853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  250.899852][ T8853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  250.963404][ T8866] IPVS: ftp: loaded support on port[0] = 21
[  250.971643][ T8858] chnl_net:caif_netlink_parms(): no params data found
[  250.991021][ T8855] team0: Port device team_slave_0 added
[  251.002745][ T8855] team0: Port device team_slave_1 added
[  251.103178][ T8858] bridge0: port 1(bridge_slave_0) entered blocking state
[  251.111319][ T8858] bridge0: port 1(bridge_slave_0) entered disabled state
[  251.121198][ T8858] device bridge_slave_0 entered promiscuous mode
[  251.131391][ T8858] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.140317][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state
[  251.148590][ T8858] device bridge_slave_1 entered promiscuous mode
[  251.211169][ T8855] device hsr_slave_0 entered promiscuous mode
[  251.276694][ T8855] device hsr_slave_1 entered promiscuous mode
[  251.346627][ T8855] debugfs: Directory 'hsr0' with parent '/' already present!
[  251.399496][ T8858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.423467][ T8858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.496951][ T8858] team0: Port device team_slave_0 added
[  251.503338][ T8855] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  251.549130][ T8855] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  251.605758][ T8858] team0: Port device team_slave_1 added
[  251.621466][ T8855] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  251.678590][ T8855] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  251.782566][ T8861] chnl_net:caif_netlink_parms(): no params data found
[  251.840554][ T8858] device hsr_slave_0 entered promiscuous mode
[  251.886781][ T8858] device hsr_slave_1 entered promiscuous mode
[  251.936463][ T8858] debugfs: Directory 'hsr0' with parent '/' already present!
[  251.946857][ T8853] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.020750][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  252.030903][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  252.044597][ T8866] chnl_net:caif_netlink_parms(): no params data found
[  252.075479][ T8853] 8021q: adding VLAN 0 to HW filter on device team0
[  252.092788][ T8863] chnl_net:caif_netlink_parms(): no params data found
[  252.109164][ T8858] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  252.164819][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.173313][ T8861] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.181860][ T8861] device bridge_slave_0 entered promiscuous mode
[  252.218392][ T8858] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  252.258875][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.265994][ T8861] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.274617][ T8861] device bridge_slave_1 entered promiscuous mode
[  252.306486][ T8863] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.313574][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.321492][ T8863] device bridge_slave_0 entered promiscuous mode
[  252.329926][ T8858] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  252.389395][ T8858] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  252.439750][ T8861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.451177][ T8861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.461692][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  252.471421][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  252.480433][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.487844][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  252.509186][ T8863] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.516463][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.524771][ T8863] device bridge_slave_1 entered promiscuous mode
[  252.552761][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  252.561349][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  252.570434][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  252.581159][ T8867] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.588540][ T8867] bridge0: port 2(bridge_slave_1) entered forwarding state
[  252.598267][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  252.608396][ T8866] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.615600][ T8866] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.625769][ T8866] device bridge_slave_0 entered promiscuous mode
[  252.644311][ T8863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  252.664481][ T8861] team0: Port device team_slave_0 added
[  252.672757][ T8861] team0: Port device team_slave_1 added
[  252.694919][ T8853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  252.707138][ T8853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  252.720509][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.728833][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.737903][ T8866] device bridge_slave_1 entered promiscuous mode
[  252.748273][ T8863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  252.782771][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  252.792952][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  252.801876][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  252.810857][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  252.819512][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  252.829179][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  252.838107][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  252.848086][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  252.857034][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  252.867708][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  252.875784][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  252.950198][ T8861] device hsr_slave_0 entered promiscuous mode
[  252.986810][ T8861] device hsr_slave_1 entered promiscuous mode
[  253.036533][ T8861] debugfs: Directory 'hsr0' with parent '/' already present!
[  253.047507][ T8863] team0: Port device team_slave_0 added
[  253.057578][ T8866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.084803][ T8863] team0: Port device team_slave_1 added
[  253.093727][ T8866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.200486][ T8863] device hsr_slave_0 entered promiscuous mode
[  253.266793][ T8863] device hsr_slave_1 entered promiscuous mode
[  253.316491][ T8863] debugfs: Directory 'hsr0' with parent '/' already present!
[  253.355354][ T8855] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.364939][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  253.379943][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  253.390783][ T8866] team0: Port device team_slave_0 added
[  253.410744][ T8853] 8021q: adding VLAN 0 to HW filter on device batadv0
[  253.435917][ T8866] team0: Port device team_slave_1 added
[  253.448929][ T8861] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  253.501249][ T8858] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.527929][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  253.535936][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  253.545786][ T8861] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  253.599284][ T8861] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  253.652644][ T8861] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  253.726514][ T8855] 8021q: adding VLAN 0 to HW filter on device team0
18:36:06 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000000)={0x3, 0x1081000981900, 0x1})

[  253.789583][ T8866] device hsr_slave_0 entered promiscuous mode
[  253.817598][ T8866] device hsr_slave_1 entered promiscuous mode
[  253.866733][ T8866] debugfs: Directory 'hsr0' with parent '/' already present!
[  253.876982][ T8858] 8021q: adding VLAN 0 to HW filter on device team0
[  253.884736][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  253.894013][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  253.906643][ T8863] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  253.941680][ T8863] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  254.028117][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.038123][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.046899][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.054119][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.062287][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  254.071836][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  254.080717][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.088003][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.095927][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  254.104676][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.113412][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.120537][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.128239][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.147940][ T8863] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  254.188416][ T8863] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.232284][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.241567][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.249821][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  254.259125][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  254.268619][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.275681][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.284074][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.318909][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.329035][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.338009][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.346543][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.382303][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.391078][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.391900][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.409803][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.419604][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.431299][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.439950][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.448390][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  254.458242][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.467056][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.475790][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.484486][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.503962][ T8866] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  254.558440][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.567550][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.579787][ T8858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  254.593794][ T8866] netdevsim netdevsim5 netdevsim1: renamed from eth1
18:36:07 executing program 0:
syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10100, &(0x7f0000000000)={0x77359400})
pipe(&(0x7f0000000200))
vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000100)={0x1a, 0x37c92098d60dfa42, 0x20, 0x37, 0x7, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
getcwd(&(0x7f0000000440)=""/82, 0x52)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2)
getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200))
ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000100))
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b)
accept4$inet(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=<r3=>0x0], &(0x7f000095dffc)=0x2)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r3, 0x0, 0x1}, 0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000002c0)={r3, @in={{0x2, 0x0, @multicast1}}, [0xdf82, 0xa9, 0x100, 0x8, 0x7, 0x0, 0x5, 0x6, 0x0, 0x2, 0x1, 0x0, 0x3, 0xec, 0xc3]}, &(0x7f00000003c0)=0x100)

[  254.663098][ T8855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.675499][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  254.686522][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  254.694966][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.705247][ T8866] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  254.739182][ T8866] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  254.824136][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  254.832990][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  254.841342][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  254.850550][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  254.860930][    C0] hrtimer: interrupt took 30262 ns
[  254.885933][ T8855] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.929273][ T8863] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.956040][ T8858] 8021q: adding VLAN 0 to HW filter on device batadv0
[  254.972005][ T8861] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.996149][ T8863] 8021q: adding VLAN 0 to HW filter on device team0
[  255.034966][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
18:36:07 executing program 0:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf05bc00000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)

[  255.044611][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
18:36:07 executing program 0:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf05bc00000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)

[  255.095993][ T8892] BPF:hdr_len not found
[  255.105415][ T8861] 8021q: adding VLAN 0 to HW filter on device team0
[  255.143869][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  255.162518][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  255.173746][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
18:36:07 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x0, 0x0)

[  255.193344][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  255.202820][ T2626] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.210107][ T2626] bridge0: port 1(bridge_slave_0) entered forwarding state
18:36:07 executing program 0:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf05bc00000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)

[  255.260179][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  255.283095][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  255.294179][ T2626] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.301364][ T2626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.350275][ T8907] mmap: syz-executor.1 (8907) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  255.355722][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  255.372369][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  255.382443][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  255.391533][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  255.402869][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  255.411882][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  255.420924][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  255.429686][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.436914][ T8871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.444860][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
18:36:07 executing program 0:
clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000070600000ee60000bf05bc00000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48)
exit(0x0)

[  255.453851][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  255.463195][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.470466][ T8871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.478290][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  255.487261][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  255.505789][ T8866] 8021q: adding VLAN 0 to HW filter on device bond0
18:36:07 executing program 0:
socket$inet6(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'veth0\x00'})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xfdc3)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
pipe(&(0x7f00000002c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)

18:36:07 executing program 2:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0)

[  255.546790][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  255.554927][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  255.573969][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  255.598363][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  255.607660][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  255.616061][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  255.642483][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  255.687790][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  255.731508][ T8863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.760532][ T8863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  255.811407][ T8861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  255.836334][ T8861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.863318][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  255.872609][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  255.886049][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  255.895331][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  255.906643][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  255.915393][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  255.923981][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  255.932628][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  255.941916][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  255.951520][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  255.960885][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  255.981416][ T8866] 8021q: adding VLAN 0 to HW filter on device team0
[  256.009121][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  256.034004][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.049058][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.061649][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.080614][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.092782][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.100081][ T8871] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.119094][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.135642][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.145380][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  256.165245][ T8863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.187201][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.197963][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.217963][ T8871] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.225047][ T8871] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.234245][ T8871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.252431][ T8861] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.261590][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.292637][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.302466][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.311316][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.320101][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  256.333223][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  256.341159][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  256.349878][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.373197][ T8866] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.403148][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  256.417507][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  256.448089][ T8939] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring
18:36:08 executing program 3:
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "ac41d1c45d71d3ed2a4182b9a6fdfebbf3550b2209895f348f8fc6716e08d1364ad5526c6e898cbb38c310d32b6a3217fa0cb9e4cafe0569942f46cde7188b"}, 0x60)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup2(r2, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
dup2(r0, r1)

[  256.663505][ T8866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.687016][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  256.694505][ T8867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
18:36:09 executing program 4:
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
open(0x0, 0x0, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), 0x8)
r1 = socket$inet6(0xa, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00')
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='comm\x00')
sendfile(r3, r2, 0x0, 0x80000000)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, 0x0)
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
socket$inet(0x2, 0x3, 0x7f)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180))
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f000069affb)={0x2, 0x0, @loopback}, 0x10)

18:36:09 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
open$dir(0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200020000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x10)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

18:36:09 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x1c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="04630440000000000e630c400000000000000000000000000f630c40"], 0x0, 0x0, 0x0})
socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f00000000c0)="d2"})

18:36:09 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x0)
close(r0)

18:36:09 executing program 3:
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x9)
r1 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r2 = accept4(r0, 0x0, 0x0, 0x0)
close(r2)
recvmmsg(r1, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)

18:36:09 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{}, 'syz0\x00', 0x1})
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

[  257.083250][ T8976] input: syz0 as /devices/virtual/input/input5
18:36:09 executing program 2:
r0 = socket$inet6(0x10, 0x80003, 0x0)
ioctl$sock_ifreq(r0, 0x8948, &(0x7f0000000040)={'gre0\x00', @ifru_data=&(0x7f0000000000)="5748b732fe7fd3908344b3971a9bda226b23b8c0762426b5789de9e2f73acd45"})

[  257.138358][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  257.138373][   T26] audit: type=1804 audit(1574015769.484:31): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir165189414/syzkaller.zg4ZXe/8/bus" dev="sda1" ino=16535 res=1
18:36:09 executing program 3:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x129, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="0401cd80"], 0x4}}, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00020160d1f3f3c0da4b0638b1d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855d4bd3388b68af3", @ANYRES16=0x0, @ANYRESOCT, @ANYRESHEX=0x0, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad030000", @ANYRESDEC], 0x0, 0x16c}, 0x20)
tkill(r0, 0x39)
socket$inet_tcp(0x2, 0x1, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  257.242209][ T8983] input: syz0 as /devices/virtual/input/input6
18:36:09 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000040)=0x1, 0x4)
bind$inet6(r1, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, &(0x7f0000000100)="b4", 0xffffffc5, 0x20000003, &(0x7f000031e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)

[  257.293249][ T8995] ptrace attach of "/root/syz-executor.3"[8994] was attempted by "/root/syz-executor.3"[8995]
[  257.320538][ T8986] binder: BINDER_SET_CONTEXT_MGR already set
[  257.337809][    C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  257.350309][ T8986] binder: 8985:8986 ioctl 40046207 0 returned -16
[  257.368164][   T26] audit: type=1804 audit(1574015769.704:32): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir165189414/syzkaller.zg4ZXe/8/bus" dev="sda1" ino=16535 res=1
18:36:09 executing program 1:
pipe(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
read(r0, &(0x7f0000000000)=""/250, 0x128b9372)
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)
socket$kcm(0x2, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)

18:36:09 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
open$dir(0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200020000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x10)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x8000fffffffe)

18:36:09 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f0000000640)='TIPCv2\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1500e9ff64ffff00800000080039503230302c2e"], 0x14)
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0xfffffffffffffe3f)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000340))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x110, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0xfffffffffffffd21, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000005c0)=[@mss, @timestamp, @timestamp, @sack_perm, @mss={0x2, 0x5}, @timestamp, @window={0x3, 0x0, 0x7f}, @timestamp, @sack_perm], 0x9)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_NMI(r4, 0xae9a)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[  257.543766][   T26] audit: type=1804 audit(1574015769.884:33): pid=9010 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir165189414/syzkaller.zg4ZXe/9/bus" dev="sda1" ino=16536 res=1
[  257.620258][ T9014] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
18:36:10 executing program 4:
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect(r0, &(0x7f0000000740)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000030800000000000006000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001000000000000000000000048fa09411def712d902f5004cff7a025b73e6bea84278f39abb0c500da0bf211f87591351d3e104cd10787ac62ac70f16659993ef2e9e95189e6587acd26b8f3"], 0x80}}, 0x0)
recvmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f0000003540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0)

18:36:10 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)

18:36:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x0)
close(r0)

18:36:10 executing program 5:
sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8800bb7e", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f010000280002000800010000000000040004000800020000000000080002000000000008000100000000004000070008000200000000000c000400000000000000000008000100000000000c0004000000000000001e0300000400000000000000000008000200000000000c0009"], 0x3}}, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000180)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x10, 0x3, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a280930206000100000001020b00000a0007003500280014000000090005407f", 0x2d}], 0x1}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)

18:36:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd2(0x0, 0x0)
close(r0)

18:36:10 executing program 4:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x20b, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e001a000000e8bd6efb120009000e0002000c0000ff050005001204", 0x2e}], 0x1}, 0x0)

18:36:10 executing program 3:
write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x13, 0x2}, 0x14)
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000380)={{}, {0x0, 0x7530}})
r0 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x200, 0x0, @mcast2, 0x6}, 0x1c)
symlink(0x0, 0x0)
connect$inet6(r0, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
sendmmsg(r0, &(0x7f0000007e00), 0x26e, 0x0)

18:36:10 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)

[  258.195917][ T9055] netlink: 'syz-executor.5': attribute type 7 has an invalid length.
[  258.222981][ T9055] netlink: 'syz-executor.5': attribute type 5 has an invalid length.
[  258.256591][ T9055] netlink: 13 bytes leftover after parsing attributes in process `syz-executor.5'.
18:36:10 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x88, 0x40001)
write$char_usb(r1, &(0x7f00000003c0)="354287e68340de551a4ee85853f5df92832aa18ad57aeef5b857e2f30e5e7d027033d6dc327204aedc7a054eaf0dab66a80196c1d76568ef5e67078dbe7070ebbf320907f9ac9137edc084", 0x4b)

18:36:10 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)

18:36:10 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(0x0)
write(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))

18:36:10 executing program 0:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02000000", @ANYRES32, @ANYBLOB, @ANYRES32], 0x4, 0x0)

18:36:10 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)

18:36:11 executing program 0:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0x1}}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x150, 0x4)
sendmsg(r0, &(0x7f00000001c0)={&(0x7f0000000140)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x40000000000008c, 0x2000, 0x0)

18:36:11 executing program 1:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open$dir(0x0, 0x14004, 0x0)
r1 = openat(r0, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@dev, @in6=@loopback}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000001900)=0x3f)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)={0x6adc, 0x0, 0x0, 0x4}, 0x6)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa23e, 0x9}, 0x200020000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x10)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="760000007d010000006f00ff7f07000000400000000001000000000000000000a875fe0000000600000001000000000000000700766d6e6574307d17002e5d656d302e26706f7369785f79636c5f6163636573730f006e667300eff16117129ed0598aa8d40f006272696467655f736c6176655f3000"], 0x76)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup2(r4, r3)
ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000180)={'bridge_slave_0\x00', {0x2, 0x4e23, @loopback}})
fallocate(r2, 0x0, 0x0, 0x1000f4)
r5 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r2, r5, 0x0, 0x8000fffffffe)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={<r6=>0x0}, &(0x7f0000000340)=0xc)
ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000003c0)=r6)

18:36:11 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
tkill(r0, 0x15)

18:36:11 executing program 5:
r0 = perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[  259.224736][   T26] audit: type=1804 audit(1574015771.564:34): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir379218951/syzkaller.dwUa8p/5/bus" dev="sda1" ino=16558 res=1
[  259.321891][   T26] audit: type=1804 audit(1574015771.644:35): pid=9102 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir379218951/syzkaller.dwUa8p/5/bus" dev="sda1" ino=16558 res=1
18:36:11 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x70d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}], @gre_common_policy=[@IFLA_GRE_OFLAGS={0x8}]]}}}]}, 0x44}}, 0x0)

[  259.614709][ T9120] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
[  259.634735][ T9120] netlink: 'syz-executor.5': attribute type 3 has an invalid length.
18:36:12 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000036e000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = dup3(r1, r2, 0x0)
dup2(r4, r3)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f0000000300))
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
dup3(0xffffffffffffffff, r5, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000003440)=[{&(0x7f0000000180)={0x27, 0x1, 0x0, 0x1, 0x2, 0x8, "02f7a7a3162e6cb935486cdc1a8fbb96240cbff33337bc704296701c5eb462510f94a9efc6100408859db319eda7c81cd107a33ababafc6b4ec253a2509953", 0x6}, 0x60, &(0x7f00000016c0)=[{&(0x7f00000003c0)="28ce9993915e1a519f89e5bf5de355f66aaa6b4d37602d8e2a04608c496252b129f2485556ba2ee0539e536a736569b36bb4f5f802da6db8d95b669efc07def4145cf7c185a9fdf4e4", 0x49}, {&(0x7f0000000440)="f95a5e497dda0fe8ac10c58befe5eb1ecc7da401b9eb87cd17e95782f38122e9dd1ed7d3a69b0d413f68e3042097e319cb0017fdd1ff512fe8e4ae6f17be34ac219e2d0a29351575bae86b2cf0896779f7ec2e1a863f38480e298ecc7768fb64b87e2f6c052ea359613a86568b0ac9ad1084f35559e882edb83b57baad3c6c19d2f27ece1f1750d545ef8d3fe79dd5e42ccb374a49a33fe9ac47c03a97651ff73cb32d7c656b4daa1974c670515febbeb707476e30acf5fb1f03e12fdf31334fdf63feb150e1975448a4c85fc6436a014d9768c505332e6e6e61d7369b9038159740672e73d815e899ce643399e490e9948c2c9e30f26dd509b47fcfa7151bcdcabfb9834b3a430b7538fb3c23644ffe2c738eca8ae11c2d9a6772c7ac6c7696ffe4a1032081c3d59132a94b3c7a1d9872fc532305b57880bddf572c56d88e1216fddce502a5d74f62574271bd54ce73282e53cbf5481f33e26fc3446db81edcedbb270149dcbb5fae9f83b2d3ca7b871d65a6cd6efd9abdb3dfcf3a7f83e218f011bcf5f87387ebe5ff8af187992fd951919e7888dce452c037dcf65554f63a022f405892f1a536914f5eeea7509b686418cdbc38fc8f59690ca7fd2dc2a2812ed466fcd182bb8aa40ec9f233e7b7d103f850a57a6cb29ef7835f835b31912d55efe70118086c433ca9fddb867ae2ed5a05a990fc0c6ca646b32004bd7ea3eeccea8297489b40a5363743aad307a2642f1d70e375939099c6a4194eda76cec2649626f97e80d91e08081f4b23120b739dded8b65f1843497e8f268ee0ed79a0391aa11d7ebfb6193f4f357513dc77410d91656dfd50627bd0a07933e2f3ddc7cd8678d0a60430cc43a8fab22958d7eb5a92bce1edd1aad24805227733f6b458a6f5394d687c3eda2596e3efd1639cad18080e8df549a36fcf946fa1b0bc4551787f9cc7ae9e529e3a2c63cc80bdceed263049c697cb3ab4601f1cd656a2b554e79485d3ebdc55f193f0633308f66fb2052129c0e4546f74c5fcc8772f9f0189c381c670bcca42f78d84c346203115bef88d3931a558f2198bfce39541a6721fa088820ffb49b7851b0d247263a83c5af61358b3433e975fa9186722db075782c82dcec1c40de7d93e8e04df9145781b59cc5b2b2dacef4880e03ebbdc5c28a3b3050c4c8f7500dd17e2c3bf7271d60e2d66b9d20fec94c0cebf1edc8b2eaa4200c714b0a7415bd8b4ccdc9c9731f20a3a5b5002b2c232ca33b670a61f9feed6cffb95dd63b0a63c05f2515ff1508e2655fa183f02e1fcfcba7cc339c85f76b2abf4ee1132cc9805c611052cf67f2f6d7fcb4a910fcdd1350dfd70d1859e99bba94e3292a3522be854e3d1f0a0d12ad2ba8e61f3d0859909d0622ae3b6ea0e60c4c21621336c3f557350ee50105f79531b61fa4f4da01c022f6a7b189b166b18ed39e5cc224b8f8368eaea8be6dc0ed6386d44ba0b8ba32192c30a5134052a6b2e5c0f2a35ffc83c6e730a9a0a92d85b7b18d3492e77abdf5c9d1160102372ce0b41ce743499f02bf17ebbc536be4983a85d950959fc1b479038e6813e165fa3f8b0fd026d4f92caf8116af2e42e93da5f71aa8a4338db217dcd1ab71366f457a06155cf838ce13ad3530293b92a128bb5a8b2f4f6a6f924cb2b80314c6bf1c841f61797feb9fa3c4ceff2d71640a183441061eb61954769a63f45e820d446fdf4f79cf095409a15dd07af9a295d8af34d662f1f634d2573ed775b04e65529d0c7f4dbc96f0f60bfa0b452fc4653972668d3500b6ad7db0fe9e3f19f0d56b0f2d2b729a9eda03f562f9337fbd56904924837007d985c00efa385c0412e9b30f66abd402f97617c3712f6f61248a4b8308c581cf47ea5748d3837ea393a0c1b9bdd42898f13706f39631fe4329226e16a5c457273cc26b37c28d513fc6ca8deea0b2a6c915211823654b4aa4a297b7155b75164414004af3be25f3445f93bb15b082e336f972b1119b081acacfc8c824e24fc8d827b72d4611a110edef0e1cdc690c1f4426af78411078febf3a223791f2efbc82784927ac9fc6acc7e05c182a14a59c0092dbd6dfc3583dcdc1a13de815945fa4eb3c80bcecb4daece3a173459efe34392d0098a2a653ed64c55757b7ecbe033ddab6c0b1a3b63ed1a5cbd06421b56e483d802dda121ef0fe81e3cc430be1d483977bed54d53a064bd9a6f25ade07ac9a3d0c34454d374756112586eeb84cbb111b5306a4d9a3dd9adfd56047cf2a3795060befbe7dd2787fb99b45f37fdd791d6302f739fa3df387f48fe3ecfa3411195bf5caa1b661360fad97b7e16584fe5781cf63214fa5f06de4f53e6a0b1c77b9a4108401dafedfa3ed7d1972c74db7761e6430a6eb7c1e2bdcf6e5a8d8ff270c21c6c9dc5e0d6d7459d3a65762326ca4e3e853f1449ed10290a02c771cf2cfd3677165d72da665db0ad999be113f5e4044108dfeac9503aef430e6a7fe3ae147dda9402de21cee167f94da3e902a2d83a39ca2e5656e67023b8473dbd75e3773197a5a9580a2e3b045afd404a527c424618206c83e166d730bc643ab8285b0ede7911d3b355033a8e1a246273130f9a2df1f53632cc2e795cb63c2936df5f95212016ef0a01ed392000947d6c5042aee3273ccde5cacfc6945149a732ee26817e767086a332dbdb0ee94d908706a3bfa9f1bf4b4da127548f960a71e9d3997e7cd9992e450bf1724e83088472f8cebbfa3fb59679549927354af36d746ffd6b8ad2567c6e8e9cf374e4b1d9b6d201663de9cfe8c69bf3d343ed7b2470a190b71d5fc0bc93c9f4383aa57b587ec2346d3e3b265240d20fac56ec5ef4a31046647c2f52228f6c76fc367bc55c8e7b703190efaef61df030acd249c71334aaf6e44231bddb35e541da124731666bb83d0afbc4116ea6c3d6ac41c6dd9f8ba313866f04851ca106bd43f1439be693fd22a9c1a685df9f0103d174a54e7e525657a26a377b209c70a27bcfd232bbf416123d408e2c302b6eef0795dd06d699c335c587e604deefd4dab8e4d11679664f375ff83c4cbdd9439798757d0efb7001d0478f6c36141fc2178866e705f5f5b585aa34ad44e6c882e49e6fa587857615711e1cb83b9d74a0dc94c0eaaa2a6b4c00d49cba45f5204dc61b3c7222807df8e496259993eb4fd9fceeacbe6c917cc08608d31492d5b6f3d0d2878e8c1b09453eceae477c44012ecc4d8428848b697f87a84bbf39c0da514e34cca5d652eb81eb324efc8d74d6f3c7754a0cae3d365a754523c770d12523f56be4150ea23697b67481122183490d20875ada61beb2808817c778e370e5f241ac8600ae1ac94212a08456a964016de26bcbc1493780f42e91db3465d17683e0c633160ff030d78e43d4e637843b59a9f362921e512915057bdda75287bf55ac0b74490bcea1c15d16d90910ff12dd7d25b29ae0820f809bfd3985a369e04e3c733fa3113bd4554ba6ca4a9c4fe7b5bb059f0423f4d5b9c4544559862068446771e60992dc19", 0x9c0}, {&(0x7f00000000c0)}, {&(0x7f0000001440)="554d0957242373e8fe6a8a004e691d7785b5ea1cea07ff5c5c34db90b998ed722d88ebb6a6232f366238ef006c9a25680217c79ee76edffb36622417cdafe25f50aeb3d1350966b2e2819b4f1bbe318d78b31fd1d22c8a227c55c1e478c8a663bff15f27a0de8a3c8838c3989ec8ef331e8adc14d0f2d50153a833d2692227855ebe0c12000ff3344e9fb51ef564fb7caf2687bc17d284916b5fa7b505ad052a801a4e64e31da60409b6788f", 0xac}, {0x0}, {0x0}], 0x6, &(0x7f0000000340)={0x10, 0x116}, 0x10}, {&(0x7f0000001740)={0x27, 0x0, 0x0, 0x0, 0x35, 0x3d, "09724a35e32e5910132c51af8e735d61de4e13652a1f752d9620d812b7cdb7321f6172872ee5d5532dff7c66e6b6c5a3616b5b97f8376cc28f273f4dfc7e37"}, 0x60, &(0x7f0000001980)=[{&(0x7f00000017c0)="39c7d8888a2d7bac0ccb03fff8618247bddef52a51dfd99dbb2d28f6925426184559df1a0ad914a170666894da75872a5162d74061c8bb674780e60a7069f0129603f5e6524a99c92c89b712a7c1df09e227c30f8697e190ae59b6119dc4b1bb7c33199cb38b816e9cdf7793cccb2727fe59b83ef4a3d0bf6931d1903d918b00f0b6982015fae4be36e0ffe4588ac093d65d23bea67578da334047f72cdc8dc9f1b5223838c9fe12838257146d354fc5f20539878b7ca25436f0ed6e23324cb246dfa6fee857a98caec6e6534d2bc3c91822b238726f3ebafd60963e2da7fd24076d8af2061e88b62a8f604088937daff131a176f6", 0xf5}, {0x0}], 0x2, &(0x7f00000019c0)={0x20, 0x10e, 0x2, "57f03f1425b93d822c4c"}, 0x20}, {&(0x7f0000001a00)={0x27, 0x0, 0x1, 0x6, 0x1, 0x0, "6199e43c43d82a0e23dd93e7d872507b7b98f0f94f81dd941bd5dc73d24f40b55f25ca8099a5553edfc6518ce13a354936bccfd74e29cb899584328086f5c6", 0xc}, 0x60, 0x0, 0x0, 0x0, 0x0, 0x40000}, {0x0, 0x0, &(0x7f0000003040), 0x0, 0x0, 0x0, 0x44}, {&(0x7f0000003080)={0x27, 0x1, 0x0, 0x7, 0x0, 0x0, "b3388ea25ff3b46515533fceba643adc3587d1018b6e203e9dd6ba79797bb66a768e80175acae6c3c8cc305783a01c73ea22398331ea5e34da60cb1c9ed2d7", 0xa}, 0x60, 0x0, 0x0, &(0x7f0000003300)={0x108, 0x0, 0x0, "71ac41c386ca843c05a0aa01e9cc3abe830b2c4fbc0825ceadcece721b671f4edd32a0a7a32497bc0eff826f111901321aab459f7b606c6bd9c94ebee71ec19fad3afefb633e00a5643dbfc8c52f9cd487bb2cc9cbad416ada3d8ce7ebe2ebc80b4f926b169e054356e6f52f9cf0e184737050773b82eac2772cf0faa53cab2947e37ead1550b491837e2381c06b2b021938c25e1663052bd9334d81c25681f4a76385b1232ee8e52263cd2b8031af8dfa4c966464611366984d90401c5a1990b98e8e48fee46c3e86a94d2897fece14ce6c804b0c6e886c31723fb14777e871801daed6658087c21949bb75cf9273cc32ce"}, 0x108, 0x40}], 0x5, 0x40000)
getsockname$netlink(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xc)
open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

18:36:12 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$tun(r0, &(0x7f00000022c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0xf98, 0x6, 0x0, @rand_addr="d56cf284e18538d3b51df0dae27685f0", @mcast2, {[], @gre={{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "fc"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "cf7b6b0bbf40037c3a003bd16fbe433c9dd42f8efd13c90816e12cf0b204b7cb5ad7afcc7efba6d64f42903ac4e970ae576d3e9c1e2b8ca9"}}}}}}, 0xfca)

18:36:12 executing program 4:
clone(0x54041bc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
r1 = gettid()
tkill(r1, 0x14)
syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0)
ptrace(0x4206, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000))
ptrace$setregs(0xf, r0, 0x0, &(0x7f0000000140)="19495ff17d")
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000000)={0x0})

18:36:12 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='sessionid\x00')
preadv(r0, &(0x7f00000017c0), 0x199, 0x0)

18:36:12 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x666011a7, 0x9)
syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x3, 0x0)
r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x10000000000003c3)

18:36:12 executing program 2:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:36:12 executing program 1:

[  259.855071][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  259.861997][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
18:36:12 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x3c8, [0x20000100, 0x0, 0x0, 0x20000328, 0x20000358], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/968]}, 0x440)

18:36:12 executing program 1:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00'})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50)

[  259.996537][ T9133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
18:36:12 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_lifetime={0x4, 0x4, 0x2}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0xb0}}, 0x0)

18:36:12 executing program 1:
r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue0\x00'})
r1 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f000013e000))

18:36:12 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r3 = dup(r2)
clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
tkill(r1, 0x18)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, 0x0, 0x0)

[  260.345443][ T9166] ALSA: seq fatal error: cannot create timer (-22)
18:36:12 executing program 3:

[  260.400861][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  260.467042][ T9133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  260.536447][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  260.542630][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:36:13 executing program 0:

[  261.256527][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  261.262399][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  261.346389][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  261.352251][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  261.576886][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  262.456471][    C0] net_ratelimit: 1 callbacks suppressed
[  262.456479][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  262.468254][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  262.616425][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  262.622271][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:36:15 executing program 5:

18:36:15 executing program 2:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:36:15 executing program 3:

18:36:15 executing program 0:

18:36:15 executing program 4:

18:36:15 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r3 = dup(r2)
clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
tkill(r1, 0x18)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, 0x0, 0x0)

18:36:15 executing program 0:

18:36:15 executing program 3:

18:36:15 executing program 5:

18:36:15 executing program 0:

18:36:15 executing program 4:

18:36:15 executing program 3:

18:36:15 executing program 5:

[  263.336355][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  263.342248][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  263.416369][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  263.422226][    C1] protocol 88fb is buggy, dev hsr_slave_1
18:36:15 executing program 2:
gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r0, &(0x7f0000c34fff), 0xffffff0b)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

18:36:15 executing program 0:

18:36:15 executing program 4:

18:36:15 executing program 5:

[  263.656445][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  263.662396][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:36:16 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r3 = dup(r2)
clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
tkill(r1, 0x18)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, 0x0, 0x0)

18:36:16 executing program 3:

18:36:16 executing program 0:

18:36:16 executing program 4:

18:36:16 executing program 5:

18:36:16 executing program 5:

18:36:16 executing program 4:

18:36:16 executing program 3:

18:36:16 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
tkill(r0, 0x15)

18:36:16 executing program 0:

18:36:16 executing program 3:

18:36:16 executing program 4:

18:36:17 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r3 = dup(r2)
clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
tkill(r1, 0x18)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
bind(0xffffffffffffffff, 0x0, 0x0)

18:36:17 executing program 5:

18:36:17 executing program 4:

18:36:17 executing program 0:

18:36:17 executing program 3:

18:36:17 executing program 4:

18:36:17 executing program 3:

18:36:17 executing program 5:

[  267.496441][    C0] net_ratelimit: 14 callbacks suppressed
[  267.496449][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  267.508246][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:36:19 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
tkill(r0, 0x15)

18:36:19 executing program 0:

18:36:19 executing program 3:

18:36:19 executing program 5:

18:36:19 executing program 4:

18:36:19 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r2 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r3 = dup(r2)
clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
execveat(r3, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
tkill(r1, 0x18)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)

[  267.576432][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  267.582380][    C1] protocol 88fb is buggy, dev hsr_slave_1
18:36:20 executing program 5:

18:36:20 executing program 4:

18:36:20 executing program 3:

18:36:20 executing program 0:

18:36:20 executing program 5:

18:36:20 executing program 4:
unshare(0x8000400)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)

[  267.816367][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  267.822240][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  268.696495][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  268.702563][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  268.856553][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  268.862496][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:36:23 executing program 2:
r0 = gettid()
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x6, 0x0)
write(r1, &(0x7f0000c34fff), 0xffffff0b)
tkill(r0, 0x15)

18:36:23 executing program 3:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
splice(r0, 0x0, r1, 0x0, 0x80000001, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$getown(r2, 0x9)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000480)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, r2, 0x0, 0x1, &(0x7f00000003c0)='\x00', r3}, 0x30)
ioprio_set$pid(0x6, 0x0, 0x7)
r4 = socket$inet6(0xa, 0x401000000001, 0x0)
r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r6)
close(r4)
syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00')
r7 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0)
socket$inet6(0xa, 0x6, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @dev}, {0x0, @remote}, 0x10, {0x2, 0x0, @empty}, 'teql0\x00'})
r8 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
ftruncate(r8, 0x208200)
r9 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r9, 0x6, 0x16, &(0x7f0000000180)=[@window={0x3, 0x6, 0x1}, @timestamp, @timestamp], 0x3)
sendfile(r4, r7, 0x0, 0x8000fffffffe)

18:36:23 executing program 0:

18:36:23 executing program 5:

18:36:23 executing program 4:

18:36:23 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
gettid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0)
r1 = memfd_create(&(0x7f0000000140)='\xab\x05\xae\xa8\x17\xe4\x93\xf4\xe4a\xa2(\t\x00\x81\xafu', 0x0)
r2 = dup(r1)
clone(0x208100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
execveat(r2, &(0x7f0000000000)='\x00', &(0x7f0000000140), 0x0, 0x1000)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)

18:36:23 executing program 5:

18:36:23 executing program 4:
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
unshare(0x400)
writev(r0, 0x0, 0xffffffffffffffff)

18:36:23 executing program 0:
unshare(0x400)
r0 = userfaultfd(0x0)
poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0)

18:36:23 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
unshare(0x400)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x1c, 0x0, &(0x7f0000000140))

18:36:23 executing program 4:
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0)

18:36:23 executing program 0:
unshare(0x8000400)
r0 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0)

[  272.856387][    C0] net_ratelimit: 16 callbacks suppressed
[  272.856395][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  272.867873][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  273.016407][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  273.022218][    C0] protocol 88fb is buggy, dev hsr_slave_1
18:36:26 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
unshare(0x400)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r3, 0x0, 0x20}, &(0x7f0000000080)=0x18)

[  273.736356][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  273.742155][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  273.816361][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  273.822184][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  274.056397][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  274.062522][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  277.896361][    C0] net_ratelimit: 14 callbacks suppressed
[  277.902184][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  277.908080][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  277.976365][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  277.983645][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  278.216404][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  278.222278][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  279.096394][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  279.102462][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  279.256434][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  279.262343][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  283.256382][    C0] net_ratelimit: 16 callbacks suppressed
[  283.256391][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  283.269062][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  283.416415][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  283.422315][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  284.136378][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  284.142317][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  284.216382][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  284.224274][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  284.456471][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  284.462419][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  288.296358][    C0] net_ratelimit: 14 callbacks suppressed
[  288.302082][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  288.307852][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  288.376368][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  288.382172][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  288.616463][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  288.622327][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  289.496392][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  289.502224][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  289.656444][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  289.662278][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  293.656408][    C0] net_ratelimit: 16 callbacks suppressed
[  293.656416][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  293.668924][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  293.816405][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  293.822237][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  294.536404][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  294.542515][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  294.616396][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  294.622479][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  294.856428][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  294.862312][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  298.696398][    C0] net_ratelimit: 14 callbacks suppressed
[  298.702268][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  298.708038][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  298.776362][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  298.782215][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  299.016439][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  299.022355][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  299.896427][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  299.902526][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  300.056429][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  300.062284][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  304.056367][    C0] net_ratelimit: 16 callbacks suppressed
[  304.062294][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  304.068170][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  304.216410][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  304.222242][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  304.936381][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  304.942778][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  305.016390][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  305.022546][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  305.256442][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  305.262305][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  309.096382][    C0] net_ratelimit: 14 callbacks suppressed
[  309.096390][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  309.107859][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  309.176363][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  309.182181][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  309.416383][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  309.422212][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  310.296401][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  310.302236][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  310.456409][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  310.462627][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  314.456374][    C0] net_ratelimit: 16 callbacks suppressed
[  314.456382][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  314.467906][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  314.616412][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  314.622238][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  315.336357][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  315.342155][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  315.416370][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  315.422189][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  315.657715][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  315.663551][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  319.497091][    C0] net_ratelimit: 14 callbacks suppressed
[  319.497101][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  319.508585][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  319.576375][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  319.582386][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  319.816446][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  319.822399][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  320.696384][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  320.702321][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  320.856384][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  320.862189][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  324.856390][    C0] net_ratelimit: 16 callbacks suppressed
[  324.862246][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  324.868050][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  325.016434][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  325.022387][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  325.736396][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  325.742397][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  325.816373][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  325.822205][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  326.056395][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  326.062458][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  329.896368][    C0] net_ratelimit: 14 callbacks suppressed
[  329.896377][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  329.908196][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  329.976358][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  329.982314][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  330.216401][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  330.222277][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  331.096378][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  331.102801][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  331.256397][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  331.262209][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  335.256372][    C0] net_ratelimit: 16 callbacks suppressed
[  335.262056][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  335.267825][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  335.416398][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  335.422430][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  336.136369][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  336.142289][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  336.216368][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  336.222427][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  336.456384][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  336.462216][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  340.296363][    C0] net_ratelimit: 14 callbacks suppressed
[  340.296372][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  340.307873][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  340.376385][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  340.382218][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  340.616441][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  340.622500][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  341.496357][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  341.502410][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  341.656424][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  341.662225][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  345.656391][    C0] net_ratelimit: 16 callbacks suppressed
[  345.662158][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  345.667913][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  345.816396][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  345.822409][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  346.536377][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  346.542197][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  346.616374][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  346.622319][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  346.856392][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  346.862205][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  350.696382][    C0] net_ratelimit: 14 callbacks suppressed
[  350.696392][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  350.708047][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  350.776348][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  350.782188][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  351.016389][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  351.022300][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  351.896369][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  351.902208][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  352.056419][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  352.062482][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  356.056388][    C0] net_ratelimit: 16 callbacks suppressed
[  356.056396][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  356.068137][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  356.216407][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  356.222464][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  356.936368][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  356.942183][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  357.016360][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  357.022487][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  357.256395][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  357.262243][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  361.096406][    C0] net_ratelimit: 14 callbacks suppressed
[  361.096414][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  361.107962][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  361.176356][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  361.182505][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  361.416407][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  361.422255][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  362.296376][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  362.302194][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  362.456396][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  362.462421][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  366.456368][    C0] net_ratelimit: 16 callbacks suppressed
[  366.456375][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  366.468008][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  366.616401][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  366.622323][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  367.336443][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  367.342340][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  367.416387][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  367.422597][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  367.656415][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  367.662304][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  371.496369][    C0] net_ratelimit: 14 callbacks suppressed
[  371.496378][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  371.508145][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  371.576356][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  371.582202][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  371.816395][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  371.822231][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  372.696385][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  372.702193][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  372.856385][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  372.862185][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  376.856393][    C0] net_ratelimit: 16 callbacks suppressed
[  376.862102][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  376.868186][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  377.016420][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  377.022280][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  377.736387][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  377.742337][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  377.816390][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  377.822353][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  378.056425][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  378.062301][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  381.896487][    C0] net_ratelimit: 14 callbacks suppressed
[  381.896496][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  381.908029][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  381.976358][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  381.982873][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  382.216382][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  382.222234][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  383.096365][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  383.102167][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  383.256380][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  383.262302][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  387.256367][    C0] net_ratelimit: 16 callbacks suppressed
[  387.256375][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  387.267969][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  387.416385][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  387.422335][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  388.136407][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  388.142324][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  388.216373][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  388.223072][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  388.456468][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  388.463364][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  392.296465][    C0] net_ratelimit: 14 callbacks suppressed
[  392.296474][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  392.308391][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  392.376358][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  392.382773][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  392.616490][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  392.623180][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  393.496414][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  393.502840][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  393.656469][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  393.663211][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  397.656419][    C0] net_ratelimit: 16 callbacks suppressed
[  397.656428][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  397.668044][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  397.816414][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  397.822393][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  398.536377][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  398.542368][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  398.616395][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  398.622232][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  398.857627][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  398.863529][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  402.696389][    C0] net_ratelimit: 14 callbacks suppressed
[  402.702094][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  402.708084][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  402.776371][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  402.782236][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  403.016380][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  403.022204][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  403.896396][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  403.902370][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  404.056390][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  404.062213][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  408.056387][    C0] net_ratelimit: 16 callbacks suppressed
[  408.062083][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  408.067874][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  408.216389][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  408.222362][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  408.936365][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  408.942275][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  409.016357][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  409.022827][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  409.256392][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  409.262240][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  413.096395][    C0] net_ratelimit: 14 callbacks suppressed
[  413.096405][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  413.107871][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  413.176360][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  413.182200][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  413.416495][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  413.422364][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  414.296364][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  414.302271][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  414.456396][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  414.462205][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  418.456359][    C0] net_ratelimit: 16 callbacks suppressed
[  418.456368][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  418.467866][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  418.616384][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  418.623099][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  419.336369][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  419.342961][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  419.416366][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  419.422202][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  419.656434][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  419.662270][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  423.496370][    C0] net_ratelimit: 14 callbacks suppressed
[  423.502085][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  423.507861][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  423.576348][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  423.582202][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  423.816408][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  423.822496][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  424.696397][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  424.702211][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  424.866420][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  424.872308][    C0] protocol 88fb is buggy, dev hsr_slave_1
[  427.656744][  T975] INFO: task :9301 can't die for more than 143 seconds.
[  427.663991][  T975]                 R  running task    28144  9301   8861 0x00004006
[  427.678200][  T975] Call Trace:
[  427.681699][  T975]  __schedule+0x8e9/0x1f30
[  427.686258][  T975]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  427.695273][  T975]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  427.704339][  T975]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  427.712941][  T975]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  427.720787][  T975]  ? lockdep_hardirqs_on+0x421/0x5e0
[  427.726068][  T975]  ? retint_kernel+0x2b/0x2b
[  427.733155][  T975]  ? trace_hardirqs_on_caller+0x6a/0x240
[  427.741978][  T975]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  427.749864][  T975]  ? __this_cpu_preempt_check+0x8a/0x190
[  427.755664][  T975]  ? __this_cpu_preempt_check+0x35/0x190
[  427.764819][  T975]  ? __this_cpu_preempt_check+0x35/0x190
[  427.773318][  T975]  ? retint_kernel+0x2b/0x2b
[  427.780448][  T975]  ? irq_work_sync+0x106/0x1d0
[  427.785473][  T975]  ? irq_work_sync+0xd1/0x1d0
[  427.792685][  T975]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  427.801289][  T975]  ? irq_work_sync+0xd1/0x1d0
[  427.805979][  T975]  ? _free_event+0x89/0x13b0
[  427.813082][  T975]  ? __kasan_check_write+0x14/0x20
[  427.820766][  T975]  ? __mutex_unlock_slowpath+0xf0/0x6a0
[  427.828732][  T975]  ? mark_held_locks+0xa4/0xf0
[  427.833519][  T975]  ? ring_buffer_attach+0x650/0x650
[  427.842611][  T975]  ? wait_for_completion+0x440/0x440
[  427.850437][  T975]  ? put_event+0x47/0x60
[  427.854675][  T975]  ? perf_event_release_kernel+0x6d5/0xd70
[  427.863006][  T975]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  427.873141][  T975]  ? __perf_event_exit_context+0x170/0x170
[  427.881434][  T975]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  427.890271][  T975]  ? perf_release+0x37/0x50
[  427.894805][  T975]  ? __fput+0x2ff/0x890
[  427.902283][  T975]  ? perf_event_release_kernel+0xd70/0xd70
[  427.910856][  T975]  ? ____fput+0x16/0x20
[  427.919081][  T975]  ? task_work_run+0x145/0x1c0
[  427.923862][  T975]  ? exit_to_usermode_loop+0x316/0x380
[  427.931815][  T975]  ? do_syscall_64+0x676/0x790
[  427.939084][  T975]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  427.945942][  T975] 
[  427.945942][  T975] Showing all locks held in the system:
[  427.960888][  T975] 1 lock held by khungtaskd/975:
[  427.965824][  T975]  #0: ffffffff88faccc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279
[  427.975528][  T975] 1 lock held by rsyslogd/8724:
[  427.989240][  T975]  #0: ffff8880a7a16920 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[  428.000813][  T975] 2 locks held by getty/8814:
[  428.005567][  T975]  #0: ffff8880a9246090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.019242][  T975]  #1: ffffc90005f212e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.031112][  T975] 2 locks held by getty/8815:
[  428.036041][  T975]  #0: ffff888095690090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.050478][  T975]  #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.060622][  T975] 2 locks held by getty/8816:
[  428.065306][  T975]  #0: ffff8880a0649090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.079635][  T975]  #1: ffffc90005f312e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.090269][  T975] 2 locks held by getty/8817:
[  428.095024][  T975]  #0: ffff88808d247090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.110936][  T975]  #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.122203][  T975] 2 locks held by getty/8818:
[  428.131009][  T975]  #0: ffff88808b2f3090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.140968][  T975]  #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.154710][  T975] 2 locks held by getty/8819:
[  428.160542][  T975]  #0: ffff8880a3879090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.173376][  T975]  #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.184212][  T975] 2 locks held by getty/8820:
[  428.192999][  T975]  #0: ffff8880995d2090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  428.203116][  T975]  #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  428.220045][  T975] 
[  428.222411][  T975] =============================================
[  428.222411][  T975] 
[  428.234113][  T975] NMI backtrace for cpu 0
[  428.238559][  T975] CPU: 0 PID: 975 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0
[  428.247142][  T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  428.257369][  T975] Call Trace:
[  428.260718][  T975]  dump_stack+0x197/0x210
[  428.265038][  T975]  nmi_cpu_backtrace.cold+0x70/0xb2
[  428.270229][  T975]  ? vprintk_func+0x86/0x189
[  428.274907][  T975]  ? lapic_can_unplug_cpu.cold+0x3a/0x3a
[  428.280528][  T975]  nmi_trigger_cpumask_backtrace+0x23b/0x28b
[  428.286498][  T975]  arch_trigger_cpumask_backtrace+0x14/0x20
[  428.292647][  T975]  watchdog+0xc8f/0x1350
[  428.296968][  T975]  kthread+0x361/0x430
[  428.301034][  T975]  ? reset_hung_task_detector+0x30/0x30
[  428.306567][  T975]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[  428.312299][  T975]  ret_from_fork+0x24/0x30
[  428.316911][  T975] Sending NMI from CPU 0 to CPUs 1:
[  428.322569][    C1] NMI backtrace for cpu 1
[  428.322574][    C1] CPU: 1 PID: 9301 Comm:  Not tainted 5.4.0-rc7-next-20191115 #0
[  428.322580][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  428.322583][    C1] RIP: 0010:irq_work_sync+0xd3/0x1d0
[  428.322593][    C1] Code: f5 ff 4d 89 e6 4d 89 e5 48 b8 00 00 00 00 00 fc ff df 49 c1 ee 03 41 83 e5 07 49 01 c6 41 83 c5 03 eb 07 e8 7f 87 f5 ff f3 90 <e8> 78 87 f5 ff be 04 00 00 00 4c 89 e7 e8 ab a6 31 00 41 0f b6 06
[  428.322596][    C1] RSP: 0018:ffff888059a3fc08 EFLAGS: 00000293
[  428.322604][    C1] RAX: ffff8880594a8180 RBX: 0000000000000002 RCX: ffffffff817e51f6
[  428.322608][    C1] RDX: 0000000000000000 RSI: ffffffff817e51c1 RDI: 0000000000000005
[  428.322612][    C1] RBP: ffff888059a3fc28 R08: ffff8880594a8180 R09: ffffed1014fd8882
[  428.322617][    C1] R10: ffffed1014fd8881 R11: ffff8880a7ec440b R12: ffff8880a7ec4408
[  428.322621][    C1] R13: 0000000000000003 R14: ffffed1014fd8881 R15: ffff888059a3fcc8
[  428.322626][    C1] FS:  0000000001a44940(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  428.322637][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  428.322641][    C1] CR2: 00007fdca4f42140 CR3: 0000000095dfb000 CR4: 00000000001406e0
[  428.322646][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  428.322650][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  428.322655][    C1] Call Trace:
[  428.322658][    C1]  _free_event+0x89/0x13b0
[  428.322661][    C1]  ? __kasan_check_write+0x14/0x20
[  428.322664][    C1]  ? __mutex_unlock_slowpath+0xf0/0x6a0
[  428.322667][    C1]  ? mark_held_locks+0xa4/0xf0
[  428.322671][    C1]  ? ring_buffer_attach+0x650/0x650
[  428.322674][    C1]  ? wait_for_completion+0x440/0x440
[  428.322677][    C1]  put_event+0x47/0x60
[  428.322680][    C1]  perf_event_release_kernel+0x6d5/0xd70
[  428.322685][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  428.322689][    C1]  ? __perf_event_exit_context+0x170/0x170
[  428.322692][    C1]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  428.322695][    C1]  perf_release+0x37/0x50
[  428.322698][    C1]  __fput+0x2ff/0x890
[  428.322701][    C1]  ? perf_event_release_kernel+0xd70/0xd70
[  428.322704][    C1]  ____fput+0x16/0x20
[  428.322707][    C1]  task_work_run+0x145/0x1c0
[  428.322711][    C1]  exit_to_usermode_loop+0x316/0x380
[  428.322714][    C1]  do_syscall_64+0x676/0x790
[  428.322717][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  428.322720][    C1] RIP: 0033:0x4141d1
[  428.322729][    C1] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[  428.322733][    C1] RSP: 002b:00007ffcce405250 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  428.322741][    C1] RAX: 0000000000000000 RBX: 0000000000000008 RCX: 00000000004141d1
[  428.322745][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007
[  428.322749][    C1] RBP: 0000000000000001 R08: 0000000010b251a9 R09: 0000000010b251ad
[  428.322754][    C1] R10: 00007ffcce405330 R11: 0000000000000293 R12: 000000000075c9a0
[  428.322758][    C1] R13: 000000000075c9a0 R14: 0000000000762c38 R15: 000000000075bf2c
[  428.336453][  T975] Kernel panic - not syncing: hung_task: blocked tasks
[  428.635416][  T975] CPU: 0 PID: 975 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0
[  428.643930][  T975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  428.653990][  T975] Call Trace:
[  428.657275][  T975]  dump_stack+0x197/0x210
[  428.661612][  T975]  panic+0x2e3/0x75c
[  428.665499][  T975]  ? add_taint.cold+0x16/0x16
[  428.670175][  T975]  ? lapic_can_unplug_cpu.cold+0x3a/0x3a
[  428.675796][  T975]  ? ___preempt_schedule+0x16/0x18
[  428.680898][  T975]  ? nmi_trigger_cpumask_backtrace+0x21b/0x28b
[  428.687102][  T975]  ? nmi_trigger_cpumask_backtrace+0x24c/0x28b
[  428.693335][  T975]  ? nmi_trigger_cpumask_backtrace+0x256/0x28b
[  428.699806][  T975]  ? nmi_trigger_cpumask_backtrace+0x21b/0x28b
[  428.706245][  T975]  watchdog+0xca0/0x1350
[  428.710512][  T975]  kthread+0x361/0x430
[  428.714670][  T975]  ? reset_hung_task_detector+0x30/0x30
[  428.720236][  T975]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[  428.726039][  T975]  ret_from_fork+0x24/0x30
[  428.733770][  T975] Kernel Offset: disabled
[  428.738351][  T975] Rebooting in 86400 seconds..