[ 33.854748] audit: type=1800 audit(1550468196.250:28): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 34.385659] audit: type=1800 audit(1550468196.860:29): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 34.404434] audit: type=1800 audit(1550468196.860:30): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts. 2019/02/18 05:36:46 fuzzer started 2019/02/18 05:36:48 dialing manager at 10.128.0.26:40013 2019/02/18 05:36:49 syscalls: 1 2019/02/18 05:36:49 code coverage: enabled 2019/02/18 05:36:49 comparison tracing: enabled 2019/02/18 05:36:49 extra coverage: extra coverage is not supported by the kernel 2019/02/18 05:36:49 setuid sandbox: enabled 2019/02/18 05:36:49 namespace sandbox: enabled 2019/02/18 05:36:49 Android sandbox: /sys/fs/selinux/policy does not exist 2019/02/18 05:36:49 fault injection: enabled 2019/02/18 05:36:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/02/18 05:36:49 net packet injection: enabled 2019/02/18 05:36:49 net device setup: enabled 05:39:36 executing program 0: syzkaller login: [ 213.950501] IPVS: ftp: loaded support on port[0] = 21 05:39:36 executing program 1: [ 214.048055] chnl_net:caif_netlink_parms(): no params data found [ 214.100950] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.108180] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.118149] device bridge_slave_0 entered promiscuous mode [ 214.126240] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.133851] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.141385] device bridge_slave_1 entered promiscuous mode [ 214.181666] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.201502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.226908] team0: Port device team_slave_0 added [ 214.234933] team0: Port device team_slave_1 added [ 214.253257] IPVS: ftp: loaded support on port[0] = 21 05:39:36 executing program 2: [ 214.302199] device hsr_slave_0 entered promiscuous mode [ 214.350599] device hsr_slave_1 entered promiscuous mode [ 214.424979] IPVS: ftp: loaded support on port[0] = 21 [ 214.436672] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.443199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.450345] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.456709] bridge0: port 1(bridge_slave_0) entered forwarding state 05:39:37 executing program 3: [ 214.629122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.638471] chnl_net:caif_netlink_parms(): no params data found [ 214.668296] IPVS: ftp: loaded support on port[0] = 21 [ 214.669346] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.688726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 214.698688] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.716644] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.725090] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 214.819018] chnl_net:caif_netlink_parms(): no params data found [ 214.834460] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.842877] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.849778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.858749] bridge0: port 1(bridge_slave_0) entered blocking state 05:39:37 executing program 4: [ 214.871271] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.883576] device bridge_slave_0 entered promiscuous mode [ 214.908177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.921341] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.927715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.938063] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.959494] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.966873] device bridge_slave_1 entered promiscuous mode [ 215.003974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 215.014155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 215.031930] IPVS: ftp: loaded support on port[0] = 21 [ 215.077100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 215.085807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 215.094025] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 215.103283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:39:37 executing program 5: [ 215.124879] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.173634] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.203127] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.209738] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.217895] device bridge_slave_0 entered promiscuous mode [ 215.254654] chnl_net:caif_netlink_parms(): no params data found [ 215.270706] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.277076] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.287813] device bridge_slave_1 entered promiscuous mode [ 215.304439] team0: Port device team_slave_0 added [ 215.314054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.335074] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.343754] team0: Port device team_slave_1 added [ 215.349997] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 215.397500] IPVS: ftp: loaded support on port[0] = 21 05:39:37 executing program 0: rt_sigaction(0x21, 0x0, &(0x7f0000000440)={0x0, {}, 0x0, 0x0}, 0x8, &(0x7f0000000480)) [ 215.439284] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.446725] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.456186] device bridge_slave_0 entered promiscuous mode 05:39:38 executing program 0: 05:39:38 executing program 0: [ 215.501409] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.507823] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.515559] device bridge_slave_1 entered promiscuous mode 05:39:38 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) [ 215.642263] device hsr_slave_0 entered promiscuous mode [ 215.679756] device hsr_slave_1 entered promiscuous mode [ 215.720315] team0: Port device team_slave_0 added [ 215.727663] team0: Port device team_slave_1 added [ 215.743272] chnl_net:caif_netlink_parms(): no params data found 05:39:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) bind(r1, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) [ 215.767890] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 215.779862] bond0: Enslaving bond_slave_1 as an active interface with an up link 05:39:38 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000000c0)=0x102, 0x4) bind$inet6(r1, &(0x7f0000d1a000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='lo\x00\x00\x00\x00\x00\x00\x02\x00', 0xff64) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x44e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20040600, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) [ 215.890356] team0: Port device team_slave_0 added [ 215.932044] device hsr_slave_0 entered promiscuous mode [ 215.952237] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 215.989993] device hsr_slave_1 entered promiscuous mode [ 216.033974] team0: Port device team_slave_1 added [ 216.040877] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.047257] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.055112] device bridge_slave_0 entered promiscuous mode [ 216.061941] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.068281] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.075743] device bridge_slave_1 entered promiscuous mode 05:39:38 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) socket$inet(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r0, &(0x7f0000000000), 0x0, 0x0) [ 216.122300] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.201813] device hsr_slave_0 entered promiscuous mode [ 216.219677] device hsr_slave_1 entered promiscuous mode [ 216.275930] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.300875] team0: Port device team_slave_0 added [ 216.306766] team0: Port device team_slave_1 added [ 216.314952] chnl_net:caif_netlink_parms(): no params data found [ 216.367223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.422716] device hsr_slave_0 entered promiscuous mode [ 216.479834] device hsr_slave_1 entered promiscuous mode [ 216.524882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.532300] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.538787] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.546341] device bridge_slave_0 entered promiscuous mode [ 216.553772] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.560799] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.567705] device bridge_slave_1 entered promiscuous mode [ 216.595438] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 216.607079] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.617425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.625190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.637967] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.645547] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 216.667418] team0: Port device team_slave_0 added [ 216.673889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.681557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.688569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.696507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.704425] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.710798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.717846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.731439] team0: Port device team_slave_1 added [ 216.740620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.748351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.756234] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.762625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.822551] device hsr_slave_0 entered promiscuous mode [ 216.859884] device hsr_slave_1 entered promiscuous mode [ 216.940442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.948205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.956342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.964203] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.972751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 216.980684] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 216.988356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.001975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.010477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.036574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.044682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.052956] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.059279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.066445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.074468] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.082302] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.088639] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.095887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.103820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.112517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.119633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.142865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.159330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.167527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.175504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.183276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.191208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.200450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.207902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.223096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.233242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.255572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.266267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.293767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.300219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.307764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.315959] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.323265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.332491] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.341605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.349904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.366134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.373508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.381003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.387850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.397069] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.412993] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.434011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.449934] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.457805] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.464211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.471912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.480420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.488018] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.494406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.501680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.514973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.522715] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.529067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.536310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.544095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.551712] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.558042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.565172] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.572900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.581596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.589087] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.595454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.602279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.610108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.617627] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.623997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.630801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.655549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.663787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.671547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 217.678532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.686902] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.694919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.703575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.711310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.718885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.726499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.734089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.741583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.749782] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 05:39:40 executing program 1: 05:39:40 executing program 0: [ 217.765586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.778969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.790554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.806160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.822621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.833181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.843874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.877410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.890038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.897650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.912892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.923357] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.931193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.938834] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.946504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.954027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.961563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.969005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.976566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.984135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.992200] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.000659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.014515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.023922] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.047643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.064622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 05:39:40 executing program 3: [ 218.084469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.123606] 8021q: adding VLAN 0 to HW filter on device batadv0 05:39:40 executing program 4: 05:39:40 executing program 2: 05:39:40 executing program 0: 05:39:40 executing program 1: 05:39:40 executing program 3: 05:39:40 executing program 5: 05:39:40 executing program 3: 05:39:40 executing program 2: 05:39:40 executing program 0: 05:39:40 executing program 1: clone(0x800083102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0x3f553e5) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) 05:39:40 executing program 5: syz_execute_func(&(0x7f0000000040)="3666440f50f564ff0941c3c4c27d794e000b7265ccc33e0f111066450f38df9bd62f6f45d319c4839122704d76") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, 0x0) 05:39:40 executing program 4: 05:39:41 executing program 2: 05:39:41 executing program 3: 05:39:41 executing program 0: 05:39:41 executing program 4: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='(', 0x1, 0x0, 0x0, 0x0) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 05:39:41 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001400)='cpu.stat\x00\xa2\x8du\x11\xc8?\x8c\x14\x84\xf77l\xb9!\x89\xbd\x98\xbd', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x100000060) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x300000a, 0x2011, r0, 0x0) mmap(&(0x7f0000a0e000/0x3000)=nil, 0x3000, 0x1000007, 0x2013, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 05:39:41 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000006c0), 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hwsim0\x00'}) 05:39:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = getpgrp(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) getsockopt(0xffffffffffffffff, 0x401, 0x0, &(0x7f0000000540)=""/184, &(0x7f0000000140)=0xb8) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syncfs(r2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 05:39:41 executing program 4: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 05:39:41 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) [ 218.949447] hrtimer: interrupt took 54452 ns 05:39:41 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x17, 0x4, 0x7, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r1, &(0x7f0000000480)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 05:39:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB='mangle\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00'], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r3, &(0x7f0000000800)="ab39524c6533fce2ec7386e3871297701c01494a930fce54aa6150d3acdf7460b855374e19b68de3d1ca660d8d6d631ecf1fd735d5dc6efdf9e56b1b55a0783abf6310", 0x0, 0x2}, 0x20) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000380)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000300)={r2, r3}) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendmmsg(r2, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1411}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0xf, &(0x7f0000001e40)}}], 0x2, 0x0) 05:39:41 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x3e, 0x0, &(0x7f00000002c0)="e460cdfbef24080000000a9386dd6a00000000072ceb3014cd3ee3000000e8d5000000010000001400000500242f09880bd320d98a61a9002100e243a665", 0x0}, 0x28) 05:39:41 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f0000000080), 0x0}, 0x20) 05:39:41 executing program 0: socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = getpgrp(0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x1) getsockopt(0xffffffffffffffff, 0x401, 0x0, &(0x7f0000000540)=""/184, &(0x7f0000000140)=0xb8) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) syncfs(r2) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={0x0}}, 0x4000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) close(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) 05:39:42 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x0, 0x3e, 0x0, &(0x7f00000002c0)="e460cdfbef24080000000a9386dd6a00000000072ceb3014cd3ee3000000e8d5000000010000001400000500242f09880bd320d98a61a9002100e243a665", 0x0}, 0x28) 05:39:42 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x200006) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) accept(r0, 0x0, 0x0) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 05:39:42 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000080)='ip6tnl0\x00') 05:39:42 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040), 0x0) 05:39:42 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xd, 0x17, 0x4, 0x7, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000540)={r1, &(0x7f0000000480)}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpuset.effective_mems\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) 05:39:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$PPPIOCGIDLE(r0, 0x8010743f, 0x0) 05:39:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 05:39:42 executing program 2: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x8000009) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) [ 219.894811] binder: 7750:7751 transaction failed 29189/-22, size 0-8 line 2896 [ 219.950286] binder: undelivered TRANSACTION_ERROR: 29189 05:39:42 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000540)=ANY=[@ANYBLOB='mangle\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\x00\x00\x00\x00\x00'], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000980)={r3, &(0x7f0000000800)="ab39524c6533fce2ec7386e3871297701c01494a930fce54aa6150d3acdf7460b855374e19b68de3d1ca660d8d6d631ecf1fd735d5dc6efdf9e56b1b55a0783abf6310", 0x0, 0x2}, 0x20) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000380)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000300)={r2, r3}) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendmmsg(r2, &(0x7f0000001ec0)=[{{&(0x7f0000000080)=@nfc={0x27, 0x1411}, 0x80, &(0x7f0000000200), 0x0, &(0x7f0000000240)}}, {{&(0x7f0000001b00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0xf, &(0x7f0000001e40)}}], 0x2, 0x0) 05:39:42 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 05:39:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) 05:39:42 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x41, 0x0) pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000400)="84", 0x1}], 0x1, 0x0) 05:39:42 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) [ 220.290152] binder: 7762:7767 got transaction with invalid offset (0, min 0 max 0) or object. [ 220.301702] binder: 7763:7768 got transaction with invalid offset (0, min 0 max 0) or object. [ 220.323963] binder: 7762:7767 transaction failed 29201/-22, size 0-8 line 3097 [ 220.336688] binder: 7763:7768 transaction failed 29201/-22, size 0-8 line 3097 [ 220.347323] binder_alloc: binder_alloc_mmap_handler: 7762 20005000-20008000 already mapped failed -16 [ 220.368311] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.378672] binder: BINDER_SET_CONTEXT_MGR already set [ 220.411079] binder: 7762:7767 ioctl 40046207 0 returned -16 [ 220.425828] binder: undelivered TRANSACTION_ERROR: 29201 05:39:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {}, 'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x20800000304, @link_local}, 0x5, {0x2, 0x0, @remote}}) 05:39:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000800)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) 05:39:43 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x9cc, 0x8e) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) 05:39:43 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {}, 'ip6_vti0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @remote}, {0x20800000304, @link_local}, 0x5, {0x2, 0x0, @remote}}) 05:39:43 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000380)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, 0x0}) [ 220.688123] binder: 7778:7783 got transaction with invalid offset (0, min 0 max 0) or object. [ 220.709597] binder: 7778:7783 transaction failed 29201/-22, size 0-8 line 3097 05:39:43 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x0, @local}}) 05:39:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x0, @empty}, {0x0, @link_local}, 0x0, {}, 'ip6_vti0\x00'}) [ 220.733891] binder: undelivered TRANSACTION_ERROR: 29201 05:39:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @local}, {0x0, @local}, 0x8, {}, '\x00\x00\x00\x05\x00\x00\x00\x00r0\x00'}) 05:39:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0x0, 0x2) 05:39:43 executing program 5: r0 = gettid() timer_create(0x0, &(0x7f0000000400)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000480)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0xfff}, {}], 0x2, 0x0) tkill(r0, 0x1000000000014) 05:39:43 executing program 4: mkdir(0x0, 0x0) userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) statx(0xffffffffffffffff, &(0x7f00000003c0)='./control/file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f000019c000/0x2000)=nil, 0x2000) clone(0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) 05:39:43 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') lseek(r0, 0x0, 0x2) 05:39:43 executing program 2: r0 = socket$kcm(0x10, 0x100000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0) 05:39:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7}, 0x0, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 05:39:43 executing program 5: [ 220.960540] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 05:39:43 executing program 0: 05:39:43 executing program 2: r0 = socket$kcm(0x10, 0x100000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000002500817ee45ae087185082cf1024b0eba06ec400002339e00586f9835b3f0016914879008cd90080e230", 0x2e}], 0x1}, 0x0) 05:39:43 executing program 5: 05:39:43 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x300) r1 = socket$kcm(0xa, 0x3, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x14, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000008400)={&(0x7f00000082c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008440)={0x6, 0x1, &(0x7f00000008c0)=@raw=[@generic], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3f00000000000000], r2}, 0x48) [ 221.142659] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. 05:39:43 executing program 1: 05:39:43 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f0000000680)=ANY=[], 0x34c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xda9, 0x4) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000f80)="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", 0x334}], 0x1) 05:39:43 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) pipe(&(0x7f00000000c0)) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="4a6a289eb3f17b43182cb26967fffd0b8e05b11095aca4da254a0c81aaf88811b3c81354363a87e716a9764795a8b8f77d756323ca9c76c5fc48a98c6e60fc141982c2f81b33d9a672236b38bb19d84afbe3147216410ef2f88ec58873360722ee1f889193f0b1a1980f06e6d390fff6588fcfb64278b8bd3f5cb6ef4cdead10cdc0a58ae27c4e438162d56524078cddd96d61f620b3af2ef4eb74d239a825871245628b121a01bdb1f5304d5ef1f91149222401f06aaa1758339dcb5f", 0xbd) r0 = creat(&(0x7f0000000700)='./file0/bus\x00', 0x100) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x80000000001, 0x31, 0xffffffffffffffff, 0x0) mq_timedsend(r0, &(0x7f0000004000)="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", 0x1001, 0x0, 0x0) 05:39:43 executing program 2: 05:39:43 executing program 4: 05:39:43 executing program 2: 05:39:44 executing program 3: 05:39:44 executing program 5: 05:39:44 executing program 4: 05:39:44 executing program 0: 05:39:44 executing program 1: 05:39:44 executing program 2: 05:39:44 executing program 4: 05:39:44 executing program 5: 05:39:44 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000003000), 0x10e6) write$FUSE_INIT(r0, &(0x7f00000001c0)={0x50, 0x0, 0x1}, 0x50) 05:39:44 executing program 3: 05:39:44 executing program 1: 05:39:44 executing program 0: 05:39:44 executing program 3: 05:39:44 executing program 5: 05:39:44 executing program 1: 05:39:44 executing program 4: 05:39:44 executing program 0: 05:39:44 executing program 1: 05:39:44 executing program 3: 05:39:44 executing program 5: 05:39:45 executing program 2: 05:39:45 executing program 4: 05:39:45 executing program 0: 05:39:45 executing program 3: 05:39:45 executing program 1: 05:39:45 executing program 5: 05:39:45 executing program 4: 05:39:45 executing program 3: 05:39:45 executing program 1: 05:39:45 executing program 5: 05:39:45 executing program 0: 05:39:45 executing program 2: 05:39:45 executing program 4: 05:39:45 executing program 1: 05:39:45 executing program 0: 05:39:45 executing program 5: 05:39:45 executing program 3: 05:39:45 executing program 2: 05:39:45 executing program 1: 05:39:45 executing program 5: 05:39:45 executing program 4: 05:39:45 executing program 0: 05:39:45 executing program 3: 05:39:45 executing program 2: 05:39:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) 05:39:45 executing program 2: syz_open_procfs(0x0, &(0x7f0000000080)='clear_refs\x00~\xdb') writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000000140)=""/8, 0xfffffea7, 0x0) 05:39:45 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x3fd) 05:39:45 executing program 3: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) umount2(0x0, 0x0) mount(&(0x7f0000000340)=ANY=[], &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x10, 0x0) 05:39:45 executing program 4: 05:39:45 executing program 5: 05:39:45 executing program 4: openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) 05:39:45 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="9d", 0x1}], 0x1) 05:39:45 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000140)=""/117, 0x75, 0x0, 0x0, 0x2}}, 0x68) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)=ANY=[]) write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) 05:39:45 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x278, 0x2) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000280)={0xa0}, 0xa0) 05:39:46 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000880)=""/246) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x1) 05:39:46 executing program 4: mkdir(0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) pipe(&(0x7f0000000280)) write(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080), 0x8}) 05:39:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000100)="460f300f07c483614804ee08440f20c03506000000440f22c0c402f93473230f09f20f013cb9b805000000b9c00000000f01d90fc728c4c1f9e79f2e000000", 0x3f}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 05:39:46 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f00000003c0)=""/148, 0xfffffc1c}], 0x108d, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') preadv(r0, &(0x7f0000000480), 0x100000000000010f, 0x0) 05:39:46 executing program 0: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0xc000000) 05:39:46 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) syz_open_pts(r0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) pipe2(0x0, 0x0) pipe(&(0x7f0000000280)) socket$inet(0x10, 0x3, 0x0) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200), &(0x7f0000000300)={&(0x7f0000000080), 0x8}) [ 223.717165] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 05:39:46 executing program 1: r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005007c00000000000000200000000000"], 0x1c) sendfile(r0, r0, &(0x7f00000000c0), 0x200ffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x32b, &(0x7f0000000000)=[{}]}, 0x10) [ 223.849639] protocol 88fb is buggy, dev hsr_slave_0 [ 223.854918] protocol 88fb is buggy, dev hsr_slave_1 05:39:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) syz_open_pts(r0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x0, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x1e9, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x1000000000000}, &(0x7f0000000200)={0x0, r3+30000000}, &(0x7f0000000300)={&(0x7f0000000080), 0x8}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:39:46 executing program 2: io_setup(0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x7003, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) [ 223.929496] protocol 88fb is buggy, dev hsr_slave_0 [ 223.934591] protocol 88fb is buggy, dev hsr_slave_1 05:39:46 executing program 4: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(0x0) flock(r0, 0x0) flock(0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) flock(0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000040)=r3) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'irlan0\x00', 0x1}) [ 224.489523] protocol 88fb is buggy, dev hsr_slave_0 [ 224.494660] protocol 88fb is buggy, dev hsr_slave_1 [ 224.649504] protocol 88fb is buggy, dev hsr_slave_0 [ 224.654614] protocol 88fb is buggy, dev hsr_slave_1 [ 224.729483] protocol 88fb is buggy, dev hsr_slave_0 [ 224.734604] protocol 88fb is buggy, dev hsr_slave_1 [ 228.889478] net_ratelimit: 18 callbacks suppressed [ 228.889485] protocol 88fb is buggy, dev hsr_slave_0 [ 228.899522] protocol 88fb is buggy, dev hsr_slave_1 [ 230.089484] protocol 88fb is buggy, dev hsr_slave_0 [ 230.094572] protocol 88fb is buggy, dev hsr_slave_1 [ 230.169486] protocol 88fb is buggy, dev hsr_slave_0 [ 230.174566] protocol 88fb is buggy, dev hsr_slave_1 [ 230.729469] protocol 88fb is buggy, dev hsr_slave_0 [ 230.734570] protocol 88fb is buggy, dev hsr_slave_1 [ 230.891129] protocol 88fb is buggy, dev hsr_slave_0 [ 230.896233] protocol 88fb is buggy, dev hsr_slave_1 [ 234.249470] net_ratelimit: 12 callbacks suppressed [ 234.249479] protocol 88fb is buggy, dev hsr_slave_0 [ 234.259530] protocol 88fb is buggy, dev hsr_slave_1 [ 234.329515] protocol 88fb is buggy, dev hsr_slave_0 [ 234.334600] protocol 88fb is buggy, dev hsr_slave_1 [ 234.889495] protocol 88fb is buggy, dev hsr_slave_0 [ 234.894591] protocol 88fb is buggy, dev hsr_slave_1 [ 235.049494] protocol 88fb is buggy, dev hsr_slave_0 [ 235.054586] protocol 88fb is buggy, dev hsr_slave_1 [ 235.129467] protocol 88fb is buggy, dev hsr_slave_0 [ 235.134543] protocol 88fb is buggy, dev hsr_slave_1 [ 239.289465] net_ratelimit: 18 callbacks suppressed [ 239.289473] protocol 88fb is buggy, dev hsr_slave_0 [ 239.299531] protocol 88fb is buggy, dev hsr_slave_1 [ 240.489485] protocol 88fb is buggy, dev hsr_slave_0 [ 240.494572] protocol 88fb is buggy, dev hsr_slave_1 [ 240.569483] protocol 88fb is buggy, dev hsr_slave_0 [ 240.574574] protocol 88fb is buggy, dev hsr_slave_1 [ 241.129499] protocol 88fb is buggy, dev hsr_slave_0 [ 241.134607] protocol 88fb is buggy, dev hsr_slave_1 [ 241.289491] protocol 88fb is buggy, dev hsr_slave_0 [ 241.294669] protocol 88fb is buggy, dev hsr_slave_1 [ 244.649472] net_ratelimit: 12 callbacks suppressed [ 244.649480] protocol 88fb is buggy, dev hsr_slave_0 [ 244.659517] protocol 88fb is buggy, dev hsr_slave_1 [ 244.729469] protocol 88fb is buggy, dev hsr_slave_0 [ 244.734565] protocol 88fb is buggy, dev hsr_slave_1 [ 245.289495] protocol 88fb is buggy, dev hsr_slave_0 [ 245.294617] protocol 88fb is buggy, dev hsr_slave_1 [ 245.449491] protocol 88fb is buggy, dev hsr_slave_0 [ 245.454762] protocol 88fb is buggy, dev hsr_slave_1 [ 245.529474] protocol 88fb is buggy, dev hsr_slave_0 [ 245.534555] protocol 88fb is buggy, dev hsr_slave_1 [ 249.689466] net_ratelimit: 18 callbacks suppressed [ 249.689474] protocol 88fb is buggy, dev hsr_slave_0 [ 249.699513] protocol 88fb is buggy, dev hsr_slave_1 [ 250.889475] protocol 88fb is buggy, dev hsr_slave_0 [ 250.894574] protocol 88fb is buggy, dev hsr_slave_1 [ 250.969482] protocol 88fb is buggy, dev hsr_slave_0 [ 250.974581] protocol 88fb is buggy, dev hsr_slave_1 [ 251.529471] protocol 88fb is buggy, dev hsr_slave_0 [ 251.534588] protocol 88fb is buggy, dev hsr_slave_1 [ 251.689531] protocol 88fb is buggy, dev hsr_slave_0 [ 251.694611] protocol 88fb is buggy, dev hsr_slave_1 [ 255.049472] net_ratelimit: 12 callbacks suppressed [ 255.049480] protocol 88fb is buggy, dev hsr_slave_0 [ 255.059532] protocol 88fb is buggy, dev hsr_slave_1 [ 255.129471] protocol 88fb is buggy, dev hsr_slave_0 [ 255.134549] protocol 88fb is buggy, dev hsr_slave_1 [ 255.689487] protocol 88fb is buggy, dev hsr_slave_0 [ 255.694592] protocol 88fb is buggy, dev hsr_slave_1 [ 255.849512] protocol 88fb is buggy, dev hsr_slave_0 [ 255.854593] protocol 88fb is buggy, dev hsr_slave_1 [ 255.929474] protocol 88fb is buggy, dev hsr_slave_0 [ 255.934555] protocol 88fb is buggy, dev hsr_slave_1 [ 260.089474] net_ratelimit: 18 callbacks suppressed [ 260.089483] protocol 88fb is buggy, dev hsr_slave_0 [ 260.099629] protocol 88fb is buggy, dev hsr_slave_1 [ 261.289478] protocol 88fb is buggy, dev hsr_slave_0 [ 261.294578] protocol 88fb is buggy, dev hsr_slave_1 [ 261.369501] protocol 88fb is buggy, dev hsr_slave_0 [ 261.374588] protocol 88fb is buggy, dev hsr_slave_1 [ 261.929528] protocol 88fb is buggy, dev hsr_slave_0 [ 261.934749] protocol 88fb is buggy, dev hsr_slave_1 [ 262.089491] protocol 88fb is buggy, dev hsr_slave_0 [ 262.094581] protocol 88fb is buggy, dev hsr_slave_1 [ 265.449472] net_ratelimit: 12 callbacks suppressed [ 265.449481] protocol 88fb is buggy, dev hsr_slave_0 [ 265.459534] protocol 88fb is buggy, dev hsr_slave_1 [ 265.529473] protocol 88fb is buggy, dev hsr_slave_0 [ 265.534551] protocol 88fb is buggy, dev hsr_slave_1 [ 266.089479] protocol 88fb is buggy, dev hsr_slave_0 [ 266.094581] protocol 88fb is buggy, dev hsr_slave_1 [ 266.249518] protocol 88fb is buggy, dev hsr_slave_0 [ 266.254615] protocol 88fb is buggy, dev hsr_slave_1 [ 266.329465] protocol 88fb is buggy, dev hsr_slave_0 [ 266.334981] protocol 88fb is buggy, dev hsr_slave_1 [ 270.489509] net_ratelimit: 18 callbacks suppressed [ 270.489517] protocol 88fb is buggy, dev hsr_slave_0 [ 270.499563] protocol 88fb is buggy, dev hsr_slave_1 [ 271.689481] protocol 88fb is buggy, dev hsr_slave_0 [ 271.694570] protocol 88fb is buggy, dev hsr_slave_1 [ 271.769483] protocol 88fb is buggy, dev hsr_slave_0 [ 271.774572] protocol 88fb is buggy, dev hsr_slave_1 [ 272.329539] protocol 88fb is buggy, dev hsr_slave_0 [ 272.334648] protocol 88fb is buggy, dev hsr_slave_1 [ 272.489710] protocol 88fb is buggy, dev hsr_slave_0 [ 272.494800] protocol 88fb is buggy, dev hsr_slave_1 [ 275.849473] net_ratelimit: 12 callbacks suppressed [ 275.849481] protocol 88fb is buggy, dev hsr_slave_0 [ 275.859543] protocol 88fb is buggy, dev hsr_slave_1 [ 275.929475] protocol 88fb is buggy, dev hsr_slave_0 [ 275.934585] protocol 88fb is buggy, dev hsr_slave_1 [ 276.489499] protocol 88fb is buggy, dev hsr_slave_0 [ 276.494608] protocol 88fb is buggy, dev hsr_slave_1 [ 276.649531] protocol 88fb is buggy, dev hsr_slave_0 [ 276.654612] protocol 88fb is buggy, dev hsr_slave_1 [ 276.729477] protocol 88fb is buggy, dev hsr_slave_0 [ 276.734562] protocol 88fb is buggy, dev hsr_slave_1 [ 280.889466] net_ratelimit: 18 callbacks suppressed [ 280.889474] protocol 88fb is buggy, dev hsr_slave_0 [ 280.899507] protocol 88fb is buggy, dev hsr_slave_1 [ 282.089770] protocol 88fb is buggy, dev hsr_slave_0 [ 282.094881] protocol 88fb is buggy, dev hsr_slave_1 [ 282.169472] protocol 88fb is buggy, dev hsr_slave_0 [ 282.174556] protocol 88fb is buggy, dev hsr_slave_1 [ 282.730102] protocol 88fb is buggy, dev hsr_slave_0 [ 282.735189] protocol 88fb is buggy, dev hsr_slave_1 [ 282.889486] protocol 88fb is buggy, dev hsr_slave_0 [ 282.894572] protocol 88fb is buggy, dev hsr_slave_1 [ 286.249476] net_ratelimit: 12 callbacks suppressed [ 286.249484] protocol 88fb is buggy, dev hsr_slave_0 [ 286.259550] protocol 88fb is buggy, dev hsr_slave_1 [ 286.329509] protocol 88fb is buggy, dev hsr_slave_0 [ 286.334602] protocol 88fb is buggy, dev hsr_slave_1 [ 286.889485] protocol 88fb is buggy, dev hsr_slave_0 [ 286.894584] protocol 88fb is buggy, dev hsr_slave_1 [ 287.049491] protocol 88fb is buggy, dev hsr_slave_0 [ 287.054586] protocol 88fb is buggy, dev hsr_slave_1 [ 287.129471] protocol 88fb is buggy, dev hsr_slave_0 [ 287.134596] protocol 88fb is buggy, dev hsr_slave_1 [ 291.289493] net_ratelimit: 18 callbacks suppressed [ 291.289501] protocol 88fb is buggy, dev hsr_slave_0 [ 291.299551] protocol 88fb is buggy, dev hsr_slave_1 [ 292.489470] protocol 88fb is buggy, dev hsr_slave_0 [ 292.494561] protocol 88fb is buggy, dev hsr_slave_1 [ 292.569485] protocol 88fb is buggy, dev hsr_slave_0 [ 292.574574] protocol 88fb is buggy, dev hsr_slave_1 [ 293.129490] protocol 88fb is buggy, dev hsr_slave_0 [ 293.134586] protocol 88fb is buggy, dev hsr_slave_1 [ 293.289524] protocol 88fb is buggy, dev hsr_slave_0 [ 293.294615] protocol 88fb is buggy, dev hsr_slave_1 [ 296.649472] net_ratelimit: 12 callbacks suppressed [ 296.649480] protocol 88fb is buggy, dev hsr_slave_0 [ 296.659525] protocol 88fb is buggy, dev hsr_slave_1 [ 296.729482] protocol 88fb is buggy, dev hsr_slave_0 [ 296.734561] protocol 88fb is buggy, dev hsr_slave_1 [ 297.289505] protocol 88fb is buggy, dev hsr_slave_0 [ 297.294604] protocol 88fb is buggy, dev hsr_slave_1 [ 297.449531] protocol 88fb is buggy, dev hsr_slave_0 [ 297.454626] protocol 88fb is buggy, dev hsr_slave_1 [ 297.529478] protocol 88fb is buggy, dev hsr_slave_0 [ 297.534558] protocol 88fb is buggy, dev hsr_slave_1 [ 301.689478] net_ratelimit: 18 callbacks suppressed [ 301.689486] protocol 88fb is buggy, dev hsr_slave_0 [ 301.699528] protocol 88fb is buggy, dev hsr_slave_1 [ 302.889470] protocol 88fb is buggy, dev hsr_slave_0 [ 302.894552] protocol 88fb is buggy, dev hsr_slave_1 [ 302.969474] protocol 88fb is buggy, dev hsr_slave_0 [ 302.974552] protocol 88fb is buggy, dev hsr_slave_1 [ 303.529490] protocol 88fb is buggy, dev hsr_slave_0 [ 303.534581] protocol 88fb is buggy, dev hsr_slave_1 [ 303.689494] protocol 88fb is buggy, dev hsr_slave_0 [ 303.694595] protocol 88fb is buggy, dev hsr_slave_1 [ 307.049504] net_ratelimit: 12 callbacks suppressed [ 307.049512] protocol 88fb is buggy, dev hsr_slave_0 [ 307.059557] protocol 88fb is buggy, dev hsr_slave_1 [ 307.129468] protocol 88fb is buggy, dev hsr_slave_0 [ 307.134549] protocol 88fb is buggy, dev hsr_slave_1 [ 307.689533] protocol 88fb is buggy, dev hsr_slave_0 [ 307.694741] protocol 88fb is buggy, dev hsr_slave_1 [ 307.849488] protocol 88fb is buggy, dev hsr_slave_0 [ 307.854578] protocol 88fb is buggy, dev hsr_slave_1 [ 307.929464] protocol 88fb is buggy, dev hsr_slave_0 [ 307.934571] protocol 88fb is buggy, dev hsr_slave_1 [ 312.089468] net_ratelimit: 18 callbacks suppressed [ 312.089476] protocol 88fb is buggy, dev hsr_slave_0 [ 312.099511] protocol 88fb is buggy, dev hsr_slave_1 [ 313.289498] protocol 88fb is buggy, dev hsr_slave_0 [ 313.294595] protocol 88fb is buggy, dev hsr_slave_1 [ 313.369517] protocol 88fb is buggy, dev hsr_slave_0 [ 313.374597] protocol 88fb is buggy, dev hsr_slave_1 [ 313.929481] protocol 88fb is buggy, dev hsr_slave_0 [ 313.934582] protocol 88fb is buggy, dev hsr_slave_1 [ 314.089509] protocol 88fb is buggy, dev hsr_slave_0 [ 314.094596] protocol 88fb is buggy, dev hsr_slave_1 [ 317.449481] net_ratelimit: 12 callbacks suppressed [ 317.449488] protocol 88fb is buggy, dev hsr_slave_0 [ 317.459542] protocol 88fb is buggy, dev hsr_slave_1 [ 317.529477] protocol 88fb is buggy, dev hsr_slave_0 [ 317.534563] protocol 88fb is buggy, dev hsr_slave_1 [ 318.089478] protocol 88fb is buggy, dev hsr_slave_0 [ 318.094567] protocol 88fb is buggy, dev hsr_slave_1 [ 318.249532] protocol 88fb is buggy, dev hsr_slave_0 [ 318.254649] protocol 88fb is buggy, dev hsr_slave_1 [ 318.329468] protocol 88fb is buggy, dev hsr_slave_0 [ 318.334552] protocol 88fb is buggy, dev hsr_slave_1 [ 322.489473] net_ratelimit: 18 callbacks suppressed [ 322.489480] protocol 88fb is buggy, dev hsr_slave_0 [ 322.499519] protocol 88fb is buggy, dev hsr_slave_1 [ 323.689477] protocol 88fb is buggy, dev hsr_slave_0 [ 323.694568] protocol 88fb is buggy, dev hsr_slave_1 [ 323.769481] protocol 88fb is buggy, dev hsr_slave_0 [ 323.774559] protocol 88fb is buggy, dev hsr_slave_1 [ 324.329519] protocol 88fb is buggy, dev hsr_slave_0 [ 324.334633] protocol 88fb is buggy, dev hsr_slave_1 [ 324.489485] protocol 88fb is buggy, dev hsr_slave_0 [ 324.494583] protocol 88fb is buggy, dev hsr_slave_1 [ 327.849476] net_ratelimit: 12 callbacks suppressed [ 327.849484] protocol 88fb is buggy, dev hsr_slave_0 [ 327.859535] protocol 88fb is buggy, dev hsr_slave_1 [ 327.929475] protocol 88fb is buggy, dev hsr_slave_0 [ 327.934554] protocol 88fb is buggy, dev hsr_slave_1 [ 328.489493] protocol 88fb is buggy, dev hsr_slave_0 [ 328.494588] protocol 88fb is buggy, dev hsr_slave_1 [ 328.649483] protocol 88fb is buggy, dev hsr_slave_0 [ 328.654573] protocol 88fb is buggy, dev hsr_slave_1 [ 328.729467] protocol 88fb is buggy, dev hsr_slave_0 [ 328.734560] protocol 88fb is buggy, dev hsr_slave_1 [ 332.889494] net_ratelimit: 18 callbacks suppressed [ 332.889503] protocol 88fb is buggy, dev hsr_slave_0 [ 332.899548] protocol 88fb is buggy, dev hsr_slave_1 [ 334.089483] protocol 88fb is buggy, dev hsr_slave_0 [ 334.094608] protocol 88fb is buggy, dev hsr_slave_1 [ 334.169473] protocol 88fb is buggy, dev hsr_slave_0 [ 334.174562] protocol 88fb is buggy, dev hsr_slave_1 [ 334.729540] protocol 88fb is buggy, dev hsr_slave_0 [ 334.734635] protocol 88fb is buggy, dev hsr_slave_1 [ 334.889501] protocol 88fb is buggy, dev hsr_slave_0 [ 334.894584] protocol 88fb is buggy, dev hsr_slave_1 [ 338.249478] net_ratelimit: 12 callbacks suppressed [ 338.249487] protocol 88fb is buggy, dev hsr_slave_0 [ 338.259547] protocol 88fb is buggy, dev hsr_slave_1 [ 338.329508] protocol 88fb is buggy, dev hsr_slave_0 [ 338.334589] protocol 88fb is buggy, dev hsr_slave_1 [ 338.889490] protocol 88fb is buggy, dev hsr_slave_0 [ 338.894583] protocol 88fb is buggy, dev hsr_slave_1 [ 339.049511] protocol 88fb is buggy, dev hsr_slave_0 [ 339.054597] protocol 88fb is buggy, dev hsr_slave_1 [ 339.129474] protocol 88fb is buggy, dev hsr_slave_0 [ 339.134551] protocol 88fb is buggy, dev hsr_slave_1 [ 343.289466] net_ratelimit: 18 callbacks suppressed [ 343.289475] protocol 88fb is buggy, dev hsr_slave_0 [ 343.299517] protocol 88fb is buggy, dev hsr_slave_1 [ 344.489481] protocol 88fb is buggy, dev hsr_slave_0 [ 344.494571] protocol 88fb is buggy, dev hsr_slave_1 [ 344.569468] protocol 88fb is buggy, dev hsr_slave_0 [ 344.574561] protocol 88fb is buggy, dev hsr_slave_1 [ 345.129493] protocol 88fb is buggy, dev hsr_slave_0 [ 345.134581] protocol 88fb is buggy, dev hsr_slave_1 [ 345.289489] protocol 88fb is buggy, dev hsr_slave_0 [ 345.294580] protocol 88fb is buggy, dev hsr_slave_1 [ 348.649472] net_ratelimit: 12 callbacks suppressed [ 348.649480] protocol 88fb is buggy, dev hsr_slave_0 [ 348.659548] protocol 88fb is buggy, dev hsr_slave_1 [ 348.729476] protocol 88fb is buggy, dev hsr_slave_0 [ 348.734564] protocol 88fb is buggy, dev hsr_slave_1 [ 349.289485] protocol 88fb is buggy, dev hsr_slave_0 [ 349.294594] protocol 88fb is buggy, dev hsr_slave_1 [ 349.449484] protocol 88fb is buggy, dev hsr_slave_0 [ 349.454665] protocol 88fb is buggy, dev hsr_slave_1 [ 349.529467] protocol 88fb is buggy, dev hsr_slave_0 [ 349.534563] protocol 88fb is buggy, dev hsr_slave_1 [ 353.689470] net_ratelimit: 18 callbacks suppressed [ 353.689478] protocol 88fb is buggy, dev hsr_slave_0 [ 353.699535] protocol 88fb is buggy, dev hsr_slave_1 [ 354.889470] protocol 88fb is buggy, dev hsr_slave_0 [ 354.894558] protocol 88fb is buggy, dev hsr_slave_1 [ 354.969475] protocol 88fb is buggy, dev hsr_slave_0 [ 354.974555] protocol 88fb is buggy, dev hsr_slave_1 [ 355.529513] protocol 88fb is buggy, dev hsr_slave_0 [ 355.534610] protocol 88fb is buggy, dev hsr_slave_1 [ 355.689540] protocol 88fb is buggy, dev hsr_slave_0 [ 355.694632] protocol 88fb is buggy, dev hsr_slave_1 [ 359.049470] net_ratelimit: 12 callbacks suppressed [ 359.049478] protocol 88fb is buggy, dev hsr_slave_0 [ 359.059541] protocol 88fb is buggy, dev hsr_slave_1 [ 359.129469] protocol 88fb is buggy, dev hsr_slave_0 [ 359.134556] protocol 88fb is buggy, dev hsr_slave_1 [ 359.689491] protocol 88fb is buggy, dev hsr_slave_0 [ 359.694582] protocol 88fb is buggy, dev hsr_slave_1 [ 359.849497] protocol 88fb is buggy, dev hsr_slave_0 [ 359.854588] protocol 88fb is buggy, dev hsr_slave_1 [ 359.929467] protocol 88fb is buggy, dev hsr_slave_0 [ 359.934543] protocol 88fb is buggy, dev hsr_slave_1 [ 364.089463] net_ratelimit: 18 callbacks suppressed [ 364.089472] protocol 88fb is buggy, dev hsr_slave_0 [ 364.099508] protocol 88fb is buggy, dev hsr_slave_1 [ 365.289481] protocol 88fb is buggy, dev hsr_slave_0 [ 365.294568] protocol 88fb is buggy, dev hsr_slave_1 [ 365.369506] protocol 88fb is buggy, dev hsr_slave_0 [ 365.374605] protocol 88fb is buggy, dev hsr_slave_1 [ 365.929484] protocol 88fb is buggy, dev hsr_slave_0 [ 365.934581] protocol 88fb is buggy, dev hsr_slave_1 [ 366.089488] protocol 88fb is buggy, dev hsr_slave_0 [ 366.094569] protocol 88fb is buggy, dev hsr_slave_1 [ 369.449473] net_ratelimit: 12 callbacks suppressed [ 369.449481] protocol 88fb is buggy, dev hsr_slave_0 [ 369.459526] protocol 88fb is buggy, dev hsr_slave_1 [ 369.529472] protocol 88fb is buggy, dev hsr_slave_0 [ 369.534555] protocol 88fb is buggy, dev hsr_slave_1 [ 370.089467] protocol 88fb is buggy, dev hsr_slave_0 [ 370.094563] protocol 88fb is buggy, dev hsr_slave_1 [ 370.249481] protocol 88fb is buggy, dev hsr_slave_0 [ 370.254560] protocol 88fb is buggy, dev hsr_slave_1 [ 370.329473] protocol 88fb is buggy, dev hsr_slave_0 [ 370.334548] protocol 88fb is buggy, dev hsr_slave_1 [ 374.489463] net_ratelimit: 18 callbacks suppressed [ 374.489471] protocol 88fb is buggy, dev hsr_slave_0 [ 374.499549] protocol 88fb is buggy, dev hsr_slave_1 [ 375.689477] protocol 88fb is buggy, dev hsr_slave_0 [ 375.694654] protocol 88fb is buggy, dev hsr_slave_1 [ 375.769479] protocol 88fb is buggy, dev hsr_slave_0 [ 375.774559] protocol 88fb is buggy, dev hsr_slave_1 [ 376.329520] protocol 88fb is buggy, dev hsr_slave_0 [ 376.334611] protocol 88fb is buggy, dev hsr_slave_1 [ 376.489515] protocol 88fb is buggy, dev hsr_slave_0 [ 376.494599] protocol 88fb is buggy, dev hsr_slave_1 [ 378.729547] INFO: task syz-executor.3:7973 blocked for more than 140 seconds. [ 378.736981] Not tainted 5.0.0-rc6+ #76 [ 378.769422] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.777433] syz-executor.3 D28224 7973 7574 0x00000004 [ 378.799422] Call Trace: [ 378.802112] __schedule+0x817/0x1cc0 [ 378.805831] ? __mutex_lock+0x721/0x1310 [ 378.810283] ? pci_mmcfg_check_reserved+0x170/0x170 [ 378.815311] schedule+0x92/0x180 [ 378.818676] schedule_preempt_disabled+0x13/0x20 [ 378.853609] __mutex_lock+0x726/0x1310 [ 378.857585] ? do_futex+0x178/0x1d50 [ 378.862248] ? vhost_net_stop_vq+0x2d/0x120 [ 378.866584] ? mutex_trylock+0x1e0/0x1e0 [ 378.893631] ? kasan_check_write+0x14/0x20 [ 378.897888] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 378.913692] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 378.919251] ? wait_for_completion+0x440/0x440 [ 378.940274] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 378.945834] mutex_lock_nested+0x16/0x20 [ 378.969437] ? mutex_lock_nested+0x16/0x20 [ 378.973704] vhost_net_stop_vq+0x2d/0x120 [ 378.977855] ? handle_rx_kick+0x50/0x50 [ 378.989435] vhost_net_release+0x5d/0x260 [ 378.993659] __fput+0x2df/0x8d0 [ 378.996944] ____fput+0x16/0x20 [ 379.009468] task_work_run+0x14a/0x1c0 [ 379.013412] exit_to_usermode_loop+0x273/0x2c0 [ 379.018007] do_syscall_64+0x52d/0x610 [ 379.056098] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 379.061367] RIP: 0033:0x411d31 [ 379.064562] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 94 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 379.124441] RSP: 002b:00007ffc19229180 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 379.132214] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411d31 [ 379.169427] RDX: 0000000000000001 RSI: 0000000000740b28 RDI: 0000000000000003 [ 379.176719] RBP: 0000000000000000 R08: 0000000000036939 R09: 0000000000036939 [ 379.199428] R10: 00007ffc192290b0 R11: 0000000000000293 R12: 0000000000000000 [ 379.206709] R13: 0000000000000001 R14: 0000000000000015 R15: 0000000000000003 [ 379.229463] [ 379.229463] Showing all locks held in the system: [ 379.235806] 1 lock held by khungtaskd/1039: [ 379.240415] #0: 00000000be4d1823 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 379.249097] 1 lock held by rsyslogd/7416: [ 379.269423] #0: 00000000735b3e3a (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 379.277367] 2 locks held by getty/7528: [ 379.299419] #0: 00000000bd7f78e7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.307683] #1: 0000000056e55b1b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.329429] 2 locks held by getty/7529: [ 379.333408] #0: 000000007470a58b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.359438] #1: 00000000073dbd06 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.368313] 2 locks held by getty/7530: [ 379.379427] #0: 00000000c4b9866c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.387728] #1: 0000000051937ab5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.396923] 2 locks held by getty/7531: [ 379.401080] #0: 000000008da3eacc (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.409330] #1: 00000000f4d0d1bc (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.418463] 2 locks held by getty/7532: [ 379.422647] #0: 00000000947c889c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.431128] #1: 00000000f3d284af (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.440221] 2 locks held by getty/7533: [ 379.444185] #0: 000000004b0cf346 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.452673] #1: 00000000b9c14272 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.461774] 2 locks held by getty/7534: [ 379.465740] #0: 0000000019958aa5 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 379.474242] #1: 00000000630b030d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 379.483332] 1 lock held by syz-executor.3/7973: [ 379.487990] #0: 0000000030868e4a (&vq->mutex){+.+.}, at: vhost_net_stop_vq+0x2d/0x120 [ 379.496346] 1 lock held by vhost-7976/7977: [ 379.509424] 1 lock held by vhost-7979/7980: [ 379.513743] [ 379.515366] ============================================= [ 379.515366] [ 379.539423] NMI backtrace for cpu 1 [ 379.543060] CPU: 1 PID: 1039 Comm: khungtaskd Not tainted 5.0.0-rc6+ #76 [ 379.549895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.559381] Call Trace: [ 379.561971] dump_stack+0x172/0x1f0 [ 379.565600] nmi_cpu_backtrace.cold+0x63/0xa4 [ 379.570175] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 379.575109] nmi_trigger_cpumask_backtrace+0x1be/0x236 [ 379.581429] arch_trigger_cpumask_backtrace+0x14/0x20 [ 379.586613] watchdog+0x9df/0xee0 [ 379.590124] kthread+0x357/0x430 [ 379.593488] ? reset_hung_task_detector+0x30/0x30 [ 379.598323] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 379.603862] ret_from_fork+0x3a/0x50 [ 379.607661] Sending NMI from CPU 1 to CPUs 0: [ 379.612465] NMI backtrace for cpu 0 [ 379.612470] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted 5.0.0-rc6+ #76 [ 379.612476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.612479] Workqueue: bat_events batadv_nc_worker [ 379.612486] RIP: 0010:lock_acquire+0x2e7/0x3f0 [ 379.612496] Code: 85 c0 75 99 44 8b 5d c0 65 ff 0d 14 96 aa 7e 0f 85 4f fe ff ff e8 fa 0e a9 ff e9 45 fe ff ff 44 89 5d c0 65 ff 05 f9 95 aa 7e <48> 8b 05 ca b9 01 08 e8 2d d5 05 00 44 8b 5d c0 85 c0 74 09 80 3d [ 379.612499] RSP: 0018:ffff8880a984fc80 EFLAGS: 00000083 [ 379.612506] RAX: 0000000000000000 RBX: ffff8880a98401c0 RCX: 0000000000000002 [ 379.612511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880a9840a3c [ 379.612515] RBP: ffff8880a984fcc8 R08: 0000000000000000 R09: 0000000000000000 [ 379.612520] R10: ffffed1015d05bcf R11: 0000000000000000 R12: ffffffff889a4300 [ 379.612525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000002 [ 379.612530] FS: 0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 379.612534] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.612538] CR2: ffffffffff600400 CR3: 000000009e4d3000 CR4: 00000000001406f0 [ 379.612543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 379.612547] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 379.612550] Call Trace: [ 379.612553] batadv_nc_worker+0x117/0x760 [ 379.612557] ? batadv_nc_worker+0xe3/0x760 [ 379.612560] process_one_work+0x98e/0x1790 [ 379.612563] ? pwq_dec_nr_in_flight+0x320/0x320 [ 379.612567] ? lock_acquire+0x16f/0x3f0 [ 379.612570] worker_thread+0x98/0xe40 [ 379.612573] kthread+0x357/0x430 [ 379.612576] ? process_one_work+0x1790/0x1790 [ 379.612580] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 379.612583] ret_from_fork+0x3a/0x50 [ 379.614288] Kernel panic - not syncing: hung_task: blocked tasks [ 379.789216] CPU: 1 PID: 1039 Comm: khungtaskd Not tainted 5.0.0-rc6+ #76 [ 379.796067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.805417] Call Trace: [ 379.808006] dump_stack+0x172/0x1f0 [ 379.811702] panic+0x2cb/0x65c [ 379.814891] ? __warn_printk+0xf3/0xf3 [ 379.818773] ? lapic_can_unplug_cpu.cold+0x38/0x38 [ 379.823699] ? ___preempt_schedule+0x16/0x18 [ 379.828109] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 379.834009] ? nmi_trigger_cpumask_backtrace+0x1fa/0x236 [ 379.839453] ? nmi_trigger_cpumask_backtrace+0x204/0x236 [ 379.844907] ? nmi_trigger_cpumask_backtrace+0x19e/0x236 [ 379.850356] watchdog+0x9f0/0xee0 [ 379.853813] kthread+0x357/0x430 [ 379.857178] ? reset_hung_task_detector+0x30/0x30 [ 379.862020] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 379.867557] ret_from_fork+0x3a/0x50 [ 379.872597] Kernel Offset: disabled [ 379.876224] Rebooting in 86400 seconds..