[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 62.373980][ T27] audit: type=1800 audit(1574051737.249:25): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 62.403670][ T27] audit: type=1800 audit(1574051737.249:26): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 62.448568][ T27] audit: type=1800 audit(1574051737.249:27): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.250' (ECDSA) to the list of known hosts. 2019/11/18 04:35:46 fuzzer started 2019/11/18 04:35:48 dialing manager at 10.128.0.26:44591 2019/11/18 04:35:48 syscalls: 2566 2019/11/18 04:35:48 code coverage: enabled 2019/11/18 04:35:48 comparison tracing: enabled 2019/11/18 04:35:48 extra coverage: enabled 2019/11/18 04:35:48 setuid sandbox: enabled 2019/11/18 04:35:48 namespace sandbox: enabled 2019/11/18 04:35:48 Android sandbox: /sys/fs/selinux/policy does not exist 2019/11/18 04:35:48 fault injection: enabled 2019/11/18 04:35:48 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/11/18 04:35:48 net packet injection: enabled 2019/11/18 04:35:48 net device setup: enabled 2019/11/18 04:35:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/11/18 04:35:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 04:38:14 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000240)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) 04:38:14 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='veno\x00', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) syzkaller login: [ 219.981944][ T8744] IPVS: ftp: loaded support on port[0] = 21 04:38:15 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, [], &(0x7f0000000040)={0x0, 0x0, [], @value64}}) [ 220.102430][ T8746] IPVS: ftp: loaded support on port[0] = 21 [ 220.200414][ T8744] chnl_net:caif_netlink_parms(): no params data found [ 220.306947][ T8749] IPVS: ftp: loaded support on port[0] = 21 [ 220.329918][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.337737][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.345534][ T8744] device bridge_slave_0 entered promiscuous mode [ 220.354760][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.361821][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.371244][ T8744] device bridge_slave_1 entered promiscuous mode 04:38:15 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000080)={@broadcast, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "085a01", 0x30, 0x3a, 0x86ddffff, @initdev={0xfe, 0x88, [0x2], 0x0, 0x0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3801, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @loopback}}}}}}}, 0x0) [ 220.456854][ T8744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.469390][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 220.485913][ T8744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.531639][ T8744] team0: Port device team_slave_0 added [ 220.564364][ T8744] team0: Port device team_slave_1 added [ 220.676715][ T8744] device hsr_slave_0 entered promiscuous mode 04:38:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000180)="0800a1695e1dcfe87b1071") sendmsg(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 220.724033][ T8744] device hsr_slave_1 entered promiscuous mode [ 220.840015][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.853494][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.861472][ T8746] device bridge_slave_0 entered promiscuous mode [ 220.885097][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.892154][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.906599][ T8746] device bridge_slave_1 entered promiscuous mode [ 220.921727][ T8752] IPVS: ftp: loaded support on port[0] = 21 [ 220.980354][ T8755] IPVS: ftp: loaded support on port[0] = 21 [ 221.016402][ T8749] chnl_net:caif_netlink_parms(): no params data found 04:38:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) socket$inet(0x2, 0x0, 0x0) [ 221.049294][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.098492][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.123505][ T8744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.177623][ T8744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.239074][ T8744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.331388][ T8744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 221.410880][ T8746] team0: Port device team_slave_0 added [ 221.420652][ T8746] team0: Port device team_slave_1 added [ 221.438917][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.439391][ T8757] IPVS: ftp: loaded support on port[0] = 21 [ 221.446118][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.463486][ T8749] device bridge_slave_0 entered promiscuous mode [ 221.472639][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.479857][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.487580][ T8749] device bridge_slave_1 entered promiscuous mode [ 221.512434][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.540798][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.599638][ T8749] team0: Port device team_slave_0 added [ 221.636392][ T8746] device hsr_slave_0 entered promiscuous mode [ 221.683582][ T8746] device hsr_slave_1 entered promiscuous mode [ 221.753682][ T8746] debugfs: Directory 'hsr0' with parent '/' already present! [ 221.802336][ T8749] team0: Port device team_slave_1 added [ 221.886466][ T8749] device hsr_slave_0 entered promiscuous mode [ 221.913651][ T8749] device hsr_slave_1 entered promiscuous mode [ 221.963486][ T8749] debugfs: Directory 'hsr0' with parent '/' already present! [ 222.017483][ T8752] chnl_net:caif_netlink_parms(): no params data found [ 222.045418][ T8755] chnl_net:caif_netlink_parms(): no params data found [ 222.063866][ T8746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.120568][ T8746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.176954][ T8746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.263521][ T8746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.309283][ T8757] chnl_net:caif_netlink_parms(): no params data found [ 222.330726][ T8752] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.338583][ T8752] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.346845][ T8752] device bridge_slave_0 entered promiscuous mode [ 222.358305][ T8752] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.365553][ T8752] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.373246][ T8752] device bridge_slave_1 entered promiscuous mode [ 222.388273][ T8755] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.395951][ T8755] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.404721][ T8755] device bridge_slave_0 entered promiscuous mode [ 222.416032][ T8755] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.423101][ T8755] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.430850][ T8755] device bridge_slave_1 entered promiscuous mode [ 222.458978][ T8755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.475889][ T8755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.500173][ T8752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.510440][ T8749] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.576116][ T8752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.591540][ T8749] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.651420][ T8749] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.715933][ T8749] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.790630][ T8755] team0: Port device team_slave_0 added [ 222.803221][ T8755] team0: Port device team_slave_1 added [ 222.810897][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.818055][ T8757] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.826311][ T8757] device bridge_slave_0 entered promiscuous mode [ 222.840931][ T8757] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.848060][ T8757] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.856664][ T8757] device bridge_slave_1 entered promiscuous mode [ 222.875393][ T8752] team0: Port device team_slave_0 added [ 222.882367][ T8757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.906168][ T8757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.916653][ T8752] team0: Port device team_slave_1 added [ 222.975479][ T8755] device hsr_slave_0 entered promiscuous mode [ 223.015512][ T8755] device hsr_slave_1 entered promiscuous mode [ 223.073384][ T8755] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.084662][ T8744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.104895][ T8757] team0: Port device team_slave_0 added [ 223.112092][ T8757] team0: Port device team_slave_1 added [ 223.151171][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.159350][ T2985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.179078][ T8744] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.246650][ T8757] device hsr_slave_0 entered promiscuous mode [ 223.293660][ T8757] device hsr_slave_1 entered promiscuous mode [ 223.333850][ T8757] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.365350][ T8752] device hsr_slave_0 entered promiscuous mode [ 223.403634][ T8752] device hsr_slave_1 entered promiscuous mode [ 223.463386][ T8752] debugfs: Directory 'hsr0' with parent '/' already present! [ 223.484476][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 223.493272][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 223.502342][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.509569][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.518695][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 223.563131][ T8755] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 223.616116][ T8755] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 223.665718][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 223.674668][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 223.684216][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.691297][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.699363][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 223.708277][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 223.723457][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.739442][ T8755] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 223.785262][ T8755] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 223.857272][ T8752] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.895189][ T8752] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.950407][ T8752] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.011755][ T8752] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.074273][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.081596][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.090116][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.098379][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.107496][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.117067][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.126372][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.135558][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.144628][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.153098][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.189333][ T8757] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.217661][ T8757] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.276770][ T8757] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.335799][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.344397][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.352779][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.359928][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.367664][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.376431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.384958][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.392008][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.399606][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.408203][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.417396][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.434716][ T8744] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.449366][ T8744] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.458665][ T8757] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.505902][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.514250][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.522326][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.531090][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.567454][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.583656][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.591498][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.601648][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.610526][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.619029][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.627572][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.636375][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.653066][ T8746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.669481][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.692523][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.701195][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.710113][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.718825][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.727490][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.734583][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.743017][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.781557][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.789656][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.799792][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.808848][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.817687][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.824893][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.832492][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.840485][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.851652][ T8752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.876160][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.885546][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.895142][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.904730][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.917189][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.935506][ T8744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.944694][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.981993][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.996399][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.017212][ T8752] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.030050][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.042734][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.051639][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.067374][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready 04:38:20 executing program 1: 04:38:20 executing program 1: [ 225.116940][ T8757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.129835][ T8749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.146862][ T8749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 04:38:20 executing program 1: [ 225.198125][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.223010][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.237158][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.249528][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready 04:38:20 executing program 1: [ 225.296833][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.303961][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.327716][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 04:38:20 executing program 1: 04:38:20 executing program 0: [ 225.361972][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 04:38:20 executing program 1: [ 225.404078][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.411202][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.444043][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 04:38:20 executing program 0: [ 225.467930][ T8755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.538064][ T8757] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.554459][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.562444][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.602485][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.613226][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.642887][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.652279][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.662702][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.671136][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.679829][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.687275][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.694731][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.702306][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.712925][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.730764][ T8749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.748637][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.757422][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.766141][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.774152][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 225.793668][ T8752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.801520][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 225.810214][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 225.821484][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.828590][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.837015][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 225.845706][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 225.853980][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.861008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.868630][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.877264][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.886197][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.895195][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.904259][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 225.912081][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.946029][ T8755] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.956579][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.968362][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.977937][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.986926][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.995221][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.003499][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 226.011655][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.019172][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.028919][ T8757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.059403][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 226.068389][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 226.077493][ T22] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.085319][ T22] bridge0: port 1(bridge_slave_0) entered forwarding state 04:38:21 executing program 2: [ 226.113728][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 226.122497][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 226.135457][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.142524][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.152385][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 226.163008][ T8752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.182614][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 226.198790][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 226.230204][ T8757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.248214][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.256402][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.285261][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 226.302258][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 226.312158][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 226.324382][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 226.345566][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 226.353265][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 226.368659][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 226.379367][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 226.392911][ T8762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready 04:38:21 executing program 3: [ 226.424474][ T8755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 226.463031][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.471810][ T12] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.491044][ T8755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.675753][ T8815] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 04:38:21 executing program 4: 04:38:21 executing program 5: 04:38:21 executing program 1: 04:38:21 executing program 0: 04:38:21 executing program 2: 04:38:21 executing program 3: 04:38:21 executing program 4: 04:38:21 executing program 0: 04:38:21 executing program 4: 04:38:21 executing program 1: 04:38:21 executing program 2: 04:38:21 executing program 3: 04:38:22 executing program 5: 04:38:22 executing program 4: 04:38:22 executing program 2: 04:38:22 executing program 0: 04:38:22 executing program 3: 04:38:22 executing program 5: 04:38:22 executing program 1: 04:38:22 executing program 0: 04:38:22 executing program 2: 04:38:22 executing program 4: 04:38:22 executing program 3: 04:38:22 executing program 5: 04:38:22 executing program 1: 04:38:22 executing program 0: 04:38:22 executing program 2: 04:38:22 executing program 3: 04:38:22 executing program 4: 04:38:22 executing program 1: 04:38:22 executing program 5: 04:38:22 executing program 0: 04:38:22 executing program 2: 04:38:22 executing program 4: 04:38:22 executing program 3: 04:38:22 executing program 1: 04:38:22 executing program 5: 04:38:22 executing program 0: 04:38:23 executing program 1: 04:38:23 executing program 3: 04:38:23 executing program 4: 04:38:23 executing program 2: 04:38:23 executing program 0: 04:38:23 executing program 5: 04:38:23 executing program 2: 04:38:23 executing program 4: 04:38:23 executing program 3: 04:38:23 executing program 0: 04:38:23 executing program 1: 04:38:23 executing program 5: 04:38:23 executing program 4: 04:38:23 executing program 2: 04:38:23 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104abffffff7ff01c33be7fe7d3", @ANYRES32=r2, @ANYBLOB="0000000000000000140012000c000100627269646765000004000200"], 0x34}}, 0x0) 04:38:23 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in=@remote}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x32}, @in=@dev}}}, 0xf8}, 0x8}, 0x0) 04:38:23 executing program 0: 04:38:23 executing program 2: 04:38:23 executing program 4: 04:38:23 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@local, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) setresgid(0x0, 0x0, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, r1}, 0xc) prctl$PR_SET_FP_MODE(0x2d, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 04:38:23 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000000080)="030462006c0060003f000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa010801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff) 04:38:23 executing program 0: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) msgsnd(r0, &(0x7f0000000480)={0x3}, 0x8, 0x0) msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0) 04:38:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00'}, 0x2c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb], 0x1f004, 0x110400}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:38:23 executing program 4: socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff0300000d698cb89e40f086dd01000005a4004000ffa377fbac141414e9", 0x0, 0x100}, 0x28) 04:38:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002000290f0000faffffff0000020000009500290000000001acf2fbd06c53844a", @ANYRES32=0x0, @ANYRES32=0x0], 0x2c}}, 0x0) 04:38:23 executing program 5: unshare(0x20060400) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter6\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/autofs\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) [ 228.976448][ C1] hrtimer: interrupt took 33711 ns [ 229.013538][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 229.019529][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 229.034731][ T8955] ptrace attach of ""[8956] was attempted by "/root/syz-executor.5"[8955] [ 229.078105][ T8972] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.080081][ T8969] BPF:hdr_len not found [ 229.159956][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 04:38:24 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000340)={0x40000000, 0x0, "2a7a5911b8f8c5c9164f25aa277fe367b821c85e10a271dc5cde692d7e3f515e"}) 04:38:24 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205648, &(0x7f0000000340)={0x3fffffff, 0x0, "2a7a5911b8f8c5c9164f25aa277fe367b821c85e10a271dc5cde692d7e3f515e"}) 04:38:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6(0xa, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) 04:38:24 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x10b}}, 0x18) 04:38:24 executing program 2: openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f00000003c0)) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@local, 0x5d}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0, 0xffffffffffffffa2}, {0x0}, {&(0x7f0000000280)=""/69, 0xfefb}], 0x10000000000000a1, 0x0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r0, 0x0, 0x0) 04:38:24 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) creat(&(0x7f0000000000)='./file0\x00', 0x0) 04:38:24 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x800000000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001600e70d017b00000000008e1584", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) openat$rfkill(0xffffffffffffff9c, 0x0, 0x101012, 0x0) 04:38:24 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x\x11k4\xd3\x1b\x05\xaf\xf0\x1eyRN\xc9\xc6V\x00\x02\x00\x00\x00\x00\x00\x00\x00', 0x275a, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={0x0}) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000100)=0xfffffffffffffff9, 0x4) shutdown(r1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) 04:38:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000001980)='/dev/input/mice\x00', 0x0, 0x142403) dup3(r0, r1, 0x0) 04:38:24 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x7, 0x800) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0) 04:38:24 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f0000000340)={0x3fffffff, 0x0, "2a7a5911b8f8c5c9164f25aa277fe367b821c85e10a271dc5cde692d7e3f515e"}) 04:38:24 executing program 5: r0 = socket$inet6(0xa, 0x401000000001, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r4, 0x208200) sendfile(r0, r3, 0x0, 0x8000fffffffe) 04:38:24 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x2000002) 04:38:24 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) close(r0) 04:38:24 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468000000001800020014000100000000", @ANYRES32=0x0], 0x4}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @link_local}, 0x0, {0x2, 0x0, @empty}, 'team_slave_1\x00'}) [ 229.904391][ T9021] syz-executor.0 (9021) used greatest stack depth: 22856 bytes left 04:38:24 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0xff0f, 0x10, &(0x7f00000005c0)=[{0x0}], 0x0) 04:38:27 executing program 2: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, 0x0) 04:38:27 executing program 4: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x2}) 04:38:27 executing program 3: 04:38:27 executing program 1: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) socket$key(0xf, 0x3, 0x2) ptrace$peekuser(0x3, 0x0, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) mkdir(0x0, 0x0) open$dir(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000380)='./bus\x00') mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x77, 0x9bf}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) eventfd(0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x20}, 0x0, &(0x7f0000000180)={0x1ff, 0xffffffffffffffff}, &(0x7f00000001c0), 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 04:38:27 executing program 0: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 04:38:27 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0815b5055e0bcfe87b3071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x3d, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) 04:38:27 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000004c0)='\x88])+\x00', 0x0) write(r0, &(0x7f0000000080)="a8", 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x0) ftruncate(r0, 0x10002) sendfile(r0, r0, &(0x7f0000000180), 0xff8) unlink(&(0x7f0000000000)='./file0\x00') [ 385.973505][ T1079] INFO: task :9038 can't die for more than 143 seconds. [ 385.980596][ T1079] R running task 28144 9038 8757 0x00004006 [ 386.000500][ T1079] Call Trace: [ 386.005272][ T1079] __schedule+0x8e9/0x1f30 [ 386.009694][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 386.020602][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 386.027346][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 386.032803][ T1079] ? lockdep_hardirqs_on+0x421/0x5e0 [ 386.044158][ T1079] ? lockdep_hardirqs_on+0x421/0x5e0 [ 386.049639][ T1079] ? retint_kernel+0x2b/0x2b [ 386.058036][ T1079] ? trace_hardirqs_on_caller+0x6a/0x240 [ 386.066010][ T1079] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 386.071529][ T1079] ? __this_cpu_preempt_check+0x8a/0x190 [ 386.081508][ T1079] ? __this_cpu_preempt_check+0x8a/0x190 [ 386.088098][ T1079] ? retint_kernel+0x2b/0x2b [ 386.092686][ T1079] ? irq_work_sync+0x106/0x1d0 [ 386.101143][ T1079] ? irq_work_sync+0x106/0x1d0 [ 386.106844][ T1079] ? irq_work_sync+0xd1/0x1d0 [ 386.111525][ T1079] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.121524][ T1079] ? irq_work_sync+0xe5/0x1d0 [ 386.127189][ T1079] ? _free_event+0x89/0x13b0 [ 386.131775][ T1079] ? __kasan_check_write+0x14/0x20 [ 386.140689][ T1079] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 386.147181][ T1079] ? mark_held_locks+0xa4/0xf0 [ 386.151938][ T1079] ? ring_buffer_attach+0x650/0x650 [ 386.160859][ T1079] ? wait_for_completion+0x440/0x440 [ 386.167099][ T1079] ? put_event+0x47/0x60 [ 386.171349][ T1079] ? perf_event_release_kernel+0x6d5/0xd70 [ 386.182875][ T1079] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.190065][ T1079] ? __perf_event_exit_context+0x170/0x170 [ 386.199535][ T1079] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 386.206808][ T1079] ? perf_release+0x37/0x50 [ 386.212279][ T1079] ? __fput+0x2ff/0x890 [ 386.220232][ T1079] ? perf_event_release_kernel+0xd70/0xd70 [ 386.227062][ T1079] ? ____fput+0x16/0x20 [ 386.231213][ T1079] ? task_work_run+0x145/0x1c0 [ 386.239653][ T1079] ? exit_to_usermode_loop+0x316/0x380 [ 386.246073][ T1079] ? do_syscall_64+0x676/0x790 [ 386.250842][ T1079] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.260708][ T1079] [ 386.260708][ T1079] Showing all locks held in the system: [ 386.269388][ T1079] 1 lock held by khungtaskd/1079: [ 386.278096][ T1079] #0: ffffffff88faccc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 386.289861][ T1079] 1 lock held by rsyslogd/8615: [ 386.298655][ T1079] #0: ffff88809a329ae0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 386.308845][ T1079] 2 locks held by getty/8705: [ 386.317184][ T1079] #0: ffff8880a153f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.327099][ T1079] #1: ffffc90005f112e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.340469][ T1079] 2 locks held by getty/8706: [ 386.346153][ T1079] #0: ffff8880a0c9c090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.358996][ T1079] #1: ffffc90005f0d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.369532][ T1079] 2 locks held by getty/8707: [ 386.378214][ T1079] #0: ffff8880a5a97090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.388113][ T1079] #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.403014][ T1079] 2 locks held by getty/8708: [ 386.409108][ T1079] #0: ffff8880a126a090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.421928][ T1079] #1: ffffc90005efd2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.432460][ T1079] 2 locks held by getty/8709: [ 386.441517][ T1079] #0: ffff8880a974b090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.451586][ T1079] #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.466414][ T1079] 2 locks held by getty/8710: [ 386.471093][ T1079] #0: ffff888093a96090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.481041][ T1079] #1: ffffc90005f192e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.494595][ T1079] 2 locks held by getty/8711: [ 386.499300][ T1079] #0: ffff888098cc6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 386.512813][ T1079] #1: ffffc90005ef12e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 386.526985][ T1079] [ 386.529312][ T1079] ============================================= [ 386.529312][ T1079] [ 386.542104][ T1079] NMI backtrace for cpu 1 [ 386.546528][ T1079] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0 [ 386.555094][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.565140][ T1079] Call Trace: [ 386.568481][ T1079] dump_stack+0x197/0x210 [ 386.572798][ T1079] nmi_cpu_backtrace.cold+0x70/0xb2 [ 386.577982][ T1079] ? vprintk_func+0x86/0x189 [ 386.582558][ T1079] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 386.588180][ T1079] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 386.594149][ T1079] arch_trigger_cpumask_backtrace+0x14/0x20 [ 386.600028][ T1079] watchdog+0xc8f/0x1350 [ 386.604347][ T1079] kthread+0x361/0x430 [ 386.608419][ T1079] ? reset_hung_task_detector+0x30/0x30 [ 386.613956][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 386.619666][ T1079] ret_from_fork+0x24/0x30 [ 386.624210][ T1079] Sending NMI from CPU 1 to CPUs 0: [ 386.629766][ C0] NMI backtrace for cpu 0 [ 386.629772][ C0] CPU: 0 PID: 9038 Comm: Not tainted 5.4.0-rc7-next-20191115 #0 [ 386.629777][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.629781][ C0] RIP: 0010:write_comp_data+0x9/0x70 [ 386.629790][ C0] Code: 13 00 00 8b 80 04 13 00 00 48 8b 11 48 83 c2 01 48 39 d0 76 07 48 89 34 d1 48 89 11 5d c3 0f 1f 00 65 4c 8b 04 25 c0 1e 02 00 <65> 8b 05 e8 44 8e 7e a9 00 01 1f 00 75 51 41 8b 80 00 13 00 00 83 [ 386.629794][ C0] RSP: 0018:ffff88806022fbf0 EFLAGS: 00000202 [ 386.629802][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff817e51f6 [ 386.629806][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000005 [ 386.629811][ C0] RBP: ffff88806022fbf8 R08: ffff88805d6d66c0 R09: ffffed1014e27082 [ 386.629815][ C0] R10: ffffed1014e27081 R11: ffff8880a713840b R12: ffff8880a7138408 [ 386.629819][ C0] R13: 0000000000000003 R14: ffffed1014e27081 R15: ffff88806022fcc8 [ 386.629824][ C0] FS: 000000000141b940(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 386.629828][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.629832][ C0] CR2: 000000c43a3bf010 CR3: 000000005e849000 CR4: 00000000001406f0 [ 386.629837][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 386.629841][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 386.629844][ C0] Call Trace: [ 386.629847][ C0] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 386.629850][ C0] irq_work_sync+0x106/0x1d0 [ 386.629853][ C0] _free_event+0x89/0x13b0 [ 386.629857][ C0] ? __kasan_check_write+0x14/0x20 [ 386.629860][ C0] ? __mutex_unlock_slowpath+0xf0/0x6a0 [ 386.629863][ C0] ? mark_held_locks+0xa4/0xf0 [ 386.629867][ C0] ? ring_buffer_attach+0x650/0x650 [ 386.629870][ C0] ? wait_for_completion+0x440/0x440 [ 386.629873][ C0] put_event+0x47/0x60 [ 386.629876][ C0] perf_event_release_kernel+0x6d5/0xd70 [ 386.629880][ C0] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 386.629883][ C0] ? __perf_event_exit_context+0x170/0x170 [ 386.629887][ C0] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 386.629890][ C0] perf_release+0x37/0x50 [ 386.629893][ C0] __fput+0x2ff/0x890 [ 386.629896][ C0] ? perf_event_release_kernel+0xd70/0xd70 [ 386.629899][ C0] ____fput+0x16/0x20 [ 386.629902][ C0] task_work_run+0x145/0x1c0 [ 386.629906][ C0] exit_to_usermode_loop+0x316/0x380 [ 386.629909][ C0] do_syscall_64+0x676/0x790 [ 386.629912][ C0] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 386.629915][ C0] RIP: 0033:0x4141d1 [ 386.629924][ C0] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 386.629928][ C0] RSP: 002b:00007ffe19905a30 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 386.629936][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004141d1 [ 386.629940][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 386.629945][ C0] RBP: 0000000000000001 R08: 00000000faaeee0d R09: 00000000faaeee11 [ 386.629949][ C0] R10: 00007ffe19905b10 R11: 0000000000000293 R12: 000000000075c9a0 [ 386.629954][ C0] R13: 000000000075c9a0 R14: 00000000007615e0 R15: 000000000075bf2c [ 386.647838][ T1079] Kernel panic - not syncing: hung_task: blocked tasks [ 386.951044][ T1079] CPU: 1 PID: 1079 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0 [ 386.959612][ T1079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 386.969739][ T1079] Call Trace: [ 386.973025][ T1079] dump_stack+0x197/0x210 [ 386.977343][ T1079] panic+0x2e3/0x75c [ 386.981230][ T1079] ? add_taint.cold+0x16/0x16 [ 386.985894][ T1079] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 386.991601][ T1079] ? ___preempt_schedule+0x16/0x18 [ 386.996703][ T1079] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 387.002841][ T1079] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 387.008977][ T1079] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 387.015117][ T1079] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 387.021268][ T1079] watchdog+0xca0/0x1350 [ 387.025509][ T1079] kthread+0x361/0x430 [ 387.029565][ T1079] ? reset_hung_task_detector+0x30/0x30 [ 387.035269][ T1079] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 387.040974][ T1079] ret_from_fork+0x24/0x30 [ 387.046866][ T1079] Kernel Offset: disabled [ 387.051201][ T1079] Rebooting in 86400 seconds..