[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   53.985145][   T27] kauditd_printk_skb: 7 callbacks suppressed
[   53.985160][   T27] audit: type=1800 audit(1576327922.164:29): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[   54.011588][   T27] audit: type=1800 audit(1576327922.164:30): pid=7696 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.1.54' (ECDSA) to the list of known hosts.
2019/12/14 12:52:09 fuzzer started
2019/12/14 12:52:11 dialing manager at 10.128.0.105:44249
2019/12/14 12:52:17 syscalls: 2686
2019/12/14 12:52:17 code coverage: enabled
2019/12/14 12:52:17 comparison tracing: enabled
2019/12/14 12:52:17 extra coverage: enabled
2019/12/14 12:52:17 setuid sandbox: enabled
2019/12/14 12:52:17 namespace sandbox: enabled
2019/12/14 12:52:17 Android sandbox: /sys/fs/selinux/policy does not exist
2019/12/14 12:52:17 fault injection: enabled
2019/12/14 12:52:17 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/12/14 12:52:17 net packet injection: enabled
2019/12/14 12:52:17 net device setup: enabled
2019/12/14 12:52:17 concurrency sanitizer: enabled
2019/12/14 12:52:17 devlink PCI setup: PCI device 0000:00:10.0 is not available
2019/12/14 12:52:24 adding functions to KCSAN blacklist: 'xas_clear_mark' 'page_counter_try_charge' 'ktime_get_real_seconds' '__hrtimer_run_queues' 'echo_char' 'enqueue_timer' 'commit_echoes' 'ext4_free_inode' 'iomap_dio_bio_actor' 'ext4_mark_iloc_dirty' 'tick_sched_do_timer' 'yama_ptracer_del' 'audit_log_start' 'ext4_nonda_switch' 'pcpu_alloc' 'ext4_has_free_clusters' 'generic_fillattr' 'do_signal_stop' 'wbt_done' 'tomoyo_supervisor' 'sit_tunnel_xmit' 'blk_mq_dispatch_rq_list' 'lruvec_lru_size' '__delete_from_page_cache' 'rcu_gp_fqs_check_wake' 'add_timer_on' 'run_timer_softirq' 'ep_poll' 'tick_nohz_idle_stop_tick' 'blk_mq_sched_dispatch_requests' '__dentry_kill' 'futex_wait_queue_me' 'generic_write_end' 'n_tty_receive_buf_common' 'wbt_wait' 'do_try_to_free_pages' 'add_timer' 'find_next_bit' 'do_exit' 'xas_find_marked' 'do_nanosleep' 'timer_clear_idle' 'find_get_pages_range_tag' 'ext4_free_inodes_count' 'tick_do_update_jiffies64' 'do_syslog' '__mark_inode_dirty' 'vm_area_dup' '__ext4_new_inode' 'copy_process' '__snd_rawmidi_transmit_ack' 'mod_timer' 'taskstats_exit' 'dd_has_work' 'mmap_region' 'common_perm_cond' 
12:54:04 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

syzkaller login: [  176.386100][ T7869] IPVS: ftp: loaded support on port[0] = 21
12:54:04 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

[  176.470185][ T7869] chnl_net:caif_netlink_parms(): no params data found
[  176.524606][ T7869] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.549893][ T7869] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.557718][ T7869] device bridge_slave_0 entered promiscuous mode
[  176.580486][ T7869] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.587614][ T7869] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.596441][ T7869] device bridge_slave_1 entered promiscuous mode
[  176.632886][ T7869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.651592][ T7869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.654413][ T7872] IPVS: ftp: loaded support on port[0] = 21
12:54:04 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, 0x0, &(0x7f0000000100)='trusted\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x80, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)

[  176.709177][ T7869] team0: Port device team_slave_0 added
[  176.729285][ T7869] team0: Port device team_slave_1 added
[  176.792135][ T7869] device hsr_slave_0 entered promiscuous mode
[  176.840190][ T7869] device hsr_slave_1 entered promiscuous mode
[  176.957524][ T7874] IPVS: ftp: loaded support on port[0] = 21
12:54:05 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000021000500d25a80648c63940d0824fc00100005400200a06d053582c137153e370900018000f01700d1bd", 0x2e}], 0x1}, 0x0)

[  177.013790][ T7869] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  177.082773][ T7869] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  177.147491][ T7869] netdevsim netdevsim0 netdevsim2: renamed from eth2
12:54:05 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c584"], 0x2)
write$binfmt_misc(r0, &(0x7f0000000200)={'syz1'}, 0x4)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  177.233992][ T7869] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  177.302555][ T7872] chnl_net:caif_netlink_parms(): no params data found
[  177.329780][ T7877] IPVS: ftp: loaded support on port[0] = 21
[  177.388661][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.410045][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.417889][ T7872] device bridge_slave_0 entered promiscuous mode
[  177.449664][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.467804][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.476230][ T7872] device bridge_slave_1 entered promiscuous mode
[  177.530396][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.557468][ T7880] IPVS: ftp: loaded support on port[0] = 21
[  177.603382][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.640609][ T7872] team0: Port device team_slave_0 added
[  177.661798][ T7872] team0: Port device team_slave_1 added
12:54:05 executing program 5:
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

[  177.717225][ T7874] chnl_net:caif_netlink_parms(): no params data found
[  177.792138][ T7872] device hsr_slave_0 entered promiscuous mode
[  177.830126][ T7872] device hsr_slave_1 entered promiscuous mode
[  177.899940][ T7872] debugfs: Directory 'hsr0' with parent '/' already present!
[  177.944317][ T7874] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.948301][ T7883] IPVS: ftp: loaded support on port[0] = 21
[  177.951455][ T7874] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.952260][ T7874] device bridge_slave_0 entered promiscuous mode
[  177.985694][ T7874] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.992918][ T7874] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.002657][ T7874] device bridge_slave_1 entered promiscuous mode
[  178.040335][ T7872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  178.094332][ T7872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  178.153669][ T7872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  178.214203][ T7874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.227735][ T7869] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.245966][ T7872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  178.322397][ T7874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.384320][ T7874] team0: Port device team_slave_0 added
[  178.391024][ T7874] team0: Port device team_slave_1 added
[  178.424689][ T7877] chnl_net:caif_netlink_parms(): no params data found
[  178.438470][ T7880] chnl_net:caif_netlink_parms(): no params data found
[  178.512063][ T7874] device hsr_slave_0 entered promiscuous mode
[  178.550217][ T7874] device hsr_slave_1 entered promiscuous mode
[  178.600012][ T7874] debugfs: Directory 'hsr0' with parent '/' already present!
[  178.625571][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.633448][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.660523][ T7869] 8021q: adding VLAN 0 to HW filter on device team0
[  178.689044][ T7880] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.696643][ T7880] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.704725][ T7880] device bridge_slave_0 entered promiscuous mode
[  178.712666][ T7880] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.719709][ T7880] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.727676][ T7880] device bridge_slave_1 entered promiscuous mode
[  178.734347][ T7877] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.741602][ T7877] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.749550][ T7877] device bridge_slave_0 entered promiscuous mode
[  178.786406][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.795151][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.804059][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.811157][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.819253][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.827737][ T7877] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.834962][ T7877] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.842889][ T7877] device bridge_slave_1 entered promiscuous mode
[  178.865330][ T7877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.880031][ T7877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.899798][ T7877] team0: Port device team_slave_0 added
[  178.906783][ T7877] team0: Port device team_slave_1 added
[  178.981634][ T7877] device hsr_slave_0 entered promiscuous mode
[  179.040166][ T7877] device hsr_slave_1 entered promiscuous mode
[  179.090001][ T7877] debugfs: Directory 'hsr0' with parent '/' already present!
[  179.098971][ T7880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.109565][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.119755][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.128276][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.135483][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.145650][ T7883] chnl_net:caif_netlink_parms(): no params data found
[  179.154687][ T7874] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  179.222751][ T7874] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  179.283758][ T7874] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  179.322739][ T7880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.337035][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  179.369432][ T7883] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.376904][ T7883] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.384947][ T7883] device bridge_slave_0 entered promiscuous mode
[  179.392710][ T7883] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.399764][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state
[  179.407590][ T7883] device bridge_slave_1 entered promiscuous mode
[  179.414485][ T7874] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  179.471777][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.482117][ T7880] team0: Port device team_slave_0 added
[  179.488934][ T7880] team0: Port device team_slave_1 added
[  179.502937][ T7883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  179.514772][ T7877] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  179.574833][ T7877] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  179.662355][ T7883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.686568][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.695459][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.704726][ T7877] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  179.792002][ T7880] device hsr_slave_0 entered promiscuous mode
[  179.860237][ T7880] device hsr_slave_1 entered promiscuous mode
[  179.909917][ T7880] debugfs: Directory 'hsr0' with parent '/' already present!
[  179.922402][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.937433][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.947850][ T7877] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  179.993675][ T7883] team0: Port device team_slave_0 added
[  179.999859][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.009176][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.018324][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.027242][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.039313][ T7869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.051413][ T7869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  180.064485][ T7872] 8021q: adding VLAN 0 to HW filter on device team0
[  180.075697][ T7883] team0: Port device team_slave_1 added
[  180.083055][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.091734][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.100424][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.108231][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.144479][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.154944][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.166520][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.173697][ T7888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.182722][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.191351][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.199660][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.206702][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.214575][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.223826][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.239667][ T7880] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  180.282084][ T7880] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.326287][ T7880] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.372063][ T7880] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  180.426095][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.472282][ T7883] device hsr_slave_0 entered promiscuous mode
[  180.510316][ T7883] device hsr_slave_1 entered promiscuous mode
[  180.549968][ T7883] debugfs: Directory 'hsr0' with parent '/' already present!
[  180.560189][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  180.568869][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  180.600889][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.608858][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.616578][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.624034][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.632886][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.652214][ T7874] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.663071][ T7869] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.700552][ T7874] 8021q: adding VLAN 0 to HW filter on device team0
[  180.710974][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.723019][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.731542][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.739578][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.753930][ T7872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.765850][ T7872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  180.786688][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.795469][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.803803][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.812786][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.821287][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.828372][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.836181][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.845152][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.853652][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.860678][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.868397][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.877886][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.897524][ T7877] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.939339][ T7883] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  180.982238][ T7883] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  180.989530][ T7890] 9pnet: p9_fd_create_unix (7890): problem connecting socket: ./file0: -111
[  181.001391][    C0] hrtimer: interrupt took 35677 ns
[  181.024638][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.033846][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.043437][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.054328][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.062438][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.070027][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.078824][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.094296][ T7874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  181.105883][ T7874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.138362][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  181.155903][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.165934][ T7890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
12:54:09 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

[  181.214832][ T7883] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  181.225722][ T7895] 9pnet: p9_fd_create_unix (7895): problem connecting socket: ./file0: -111
[  181.272599][ T7883] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  181.304606][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.313717][ T7877] 8021q: adding VLAN 0 to HW filter on device team0
[  181.318739][ T7899] 9pnet: p9_fd_create_unix (7899): problem connecting socket: ./file0: -111
[  181.330088][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.338400][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  181.352289][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.361249][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.369548][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.377937][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  181.386437][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.394365][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.403090][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.411540][ T3093] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.418568][ T3093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.426520][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.435256][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.443614][ T3093] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.450774][ T3093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.458724][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.468636][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.476456][ T3093] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  181.493863][ T7880] 8021q: adding VLAN 0 to HW filter on device bond0
[  181.535750][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  181.559182][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.569045][ T7899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.644192][ T7877] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  181.655146][ T7877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  181.672484][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.682283][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
12:54:09 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

[  181.693767][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.703355][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.723445][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.737547][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.750812][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.762416][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  181.770589][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  181.778354][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  181.796177][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.809508][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.819019][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.836124][ T7909] 9pnet: p9_fd_create_unix (7909): problem connecting socket: ./file0: -111
[  181.849267][ T7905] ERROR: Domain '<kernel> /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.1 proc:/self/fd/3' not defined.
[  181.851757][ T7874] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.882884][ T7880] 8021q: adding VLAN 0 to HW filter on device team0
[  181.913879][ T7877] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.922742][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.937190][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.945606][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.956669][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.964382][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  181.975987][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  181.984698][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.991818][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  182.046527][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  182.085061][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.094988][ T7909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  182.243425][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  182.260763][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  182.269680][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  182.280264][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state
12:54:10 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

[  182.287295][ T7888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  182.305568][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  182.321147][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  182.330525][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  182.340097][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  182.351362][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  182.360760][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  182.385191][ T7880] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  182.398674][ T7880] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  182.435091][ T7883] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.452753][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  182.474986][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  182.493226][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  182.511850][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  182.526438][ T7924] 9pnet: p9_fd_create_unix (7924): problem connecting socket: ./file0: -111
[  182.539558][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  182.563377][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  182.576836][   T27] audit: type=1804 audit(1576328050.764:31): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219461396/syzkaller.ncbKKx/0/bus" dev="sda1" ino=16527 res=1
[  182.626572][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
12:54:10 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

[  182.665023][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.698788][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
12:54:10 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

[  182.725354][ T7888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  182.757259][ T7883] 8021q: adding VLAN 0 to HW filter on device team0
[  182.801506][ T7939] 9pnet: p9_fd_create_unix (7939): problem connecting socket: ./file0: -111
[  182.839441][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  182.887036][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  182.901196][ T7918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
12:54:11 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open$dir(0x0, 0x0, 0x0)
linkat(r1, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0)
write$9p(0xffffffffffffffff, 0x0, 0x0)
r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x8, 0x6011, r2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffe26, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000040800010100000000"], 0x30}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r4 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x25}, @empty, @broadcast}, 0xc)
syz_open_dev$rtc(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[  183.055573][ T7880] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.069981][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  183.078756][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  183.097901][ T3603] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.105015][ T3603] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.137119][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  183.145930][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  183.168275][ T3603] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.175541][ T3603] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.187741][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  183.202124][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  183.217182][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.225819][ T7934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  183.259130][ T7950] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  183.276479][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  183.288219][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  183.301068][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
12:54:11 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, 0x0, &(0x7f0000000100)='trusted\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x80, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)

[  183.315315][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  183.319946][   T27] audit: type=1804 audit(1576328051.494:32): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219461396/syzkaller.ncbKKx/0/bus" dev="sda1" ino=16527 res=1
[  183.324331][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  183.359735][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
12:54:11 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

[  183.386845][ T3603] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  183.403202][ T7883] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  183.423718][   T27] audit: type=1800 audit(1576328051.494:33): pid=7925 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16527 res=0
[  183.451948][ T7883] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
12:54:11 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open$dir(0x0, 0x0, 0x0)
linkat(r1, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0)
write$9p(0xffffffffffffffff, 0x0, 0x0)
r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x8, 0x6011, r2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffe26, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000040800010100000000"], 0x30}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r4 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x25}, @empty, @broadcast}, 0xc)
syz_open_dev$rtc(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

[  183.500230][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  183.526182][ T7966] 9pnet: p9_fd_create_unix (7966): problem connecting socket: ./file0: -111
[  183.542462][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  183.557262][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  183.575115][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  183.583228][   T27] audit: type=1804 audit(1576328051.774:34): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219461396/syzkaller.ncbKKx/1/bus" dev="sda1" ino=16517 res=1
[  183.587301][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
12:54:11 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

[  183.731469][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  183.775041][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  183.784353][ T7966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  183.977434][ T7883] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.206358][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.215984][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
12:54:12 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x1, 0x0, 0x0, 0x9, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getuid()
mount$9p_unix(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=unix,', {[{@version_u='version=9p2000.u'}, {@access_uid={'access', 0x3d, r0}}], [{@subj_role={'subj_role', 0x3d, 'cpuset.mem_exclusive\x00'}}]}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000400)={{0x0, 0x3f}, {0x0, 0x6}, 0x7, 0x0, 0x2})
pipe(0x0)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$amidi(0x0, 0x0, 0x1)
setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000480), 0x1)
socket$packet(0x11, 0x0, 0x300)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mem_exclusive\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0)
fstat(0xffffffffffffffff, &(0x7f00000000c0))
ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422)

[  184.355266][ T7996] 9pnet: p9_fd_create_unix (7996): problem connecting socket: ./file0: -111
[  184.460950][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  184.514101][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  184.560803][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  184.980050][  T264] tipc: TX() has been purged, node left!
12:54:13 executing program 5:
ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000001c0)=0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x2)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r0, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)

12:54:13 executing program 0:
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0)
write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00'})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open$dir(0x0, 0x0, 0x0)
linkat(r1, &(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000280)='./file0\x00', 0x0)
write$9p(0xffffffffffffffff, 0x0, 0x0)
r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x8, 0x6011, r2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0xfffffffffffffe26, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000040800010100000000"], 0x30}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r4 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r4, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendto$inet(r4, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x25}, @empty, @broadcast}, 0xc)
syz_open_dev$rtc(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, 0x0, 0x0)

12:54:13 executing program 2:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000cab000)=0xc)
add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$search(0xa, 0x0, &(0x7f0000000100)='trusted\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
gettid()
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x80, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0)
write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[], 0x323)
r6 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8fff)

12:54:13 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c584"], 0x2)
write$binfmt_misc(r0, &(0x7f0000000200)={'syz1'}, 0x4)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

12:54:13 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = memfd_create(&(0x7f0000000100)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86Xe\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\xe5j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x80dX\xcc\xab\x84\xd1\x01_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2L\xf0\xaf\xe1jd\xda\x1f>Vrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU\".\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf', 0x0)
execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

12:54:13 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c584"], 0x2)
write$binfmt_misc(r0, &(0x7f0000000200)={'syz1'}, 0x4)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  185.534427][   T27] audit: type=1804 audit(1576328053.714:35): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir219461396/syzkaller.ncbKKx/2/bus" dev="sda1" ino=16518 res=1
12:54:13 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c584"], 0x2)
write$binfmt_misc(r0, &(0x7f0000000200)={'syz1'}, 0x4)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

12:54:14 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="c584"], 0x2)
write$binfmt_misc(r0, &(0x7f0000000200)={'syz1'}, 0x4)
perf_event_open(&(0x7f0000000180)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

[  186.134203][ T8024] ==================================================================
[  186.142348][ T8024] BUG: KCSAN: data-race in pid_update_inode / pid_update_inode
[  186.149903][ T8024] 
[  186.152260][ T8024] read to 0xffff888125742d68 of 2 bytes by task 8027 on cpu 1:
[  186.159848][ T8024]  pid_update_inode+0x25/0x70
[  186.164532][ T8024]  pid_revalidate+0x91/0x120
[  186.169132][ T8024]  lookup_fast+0x612/0x6c0
[  186.173553][ T8024]  path_openat+0x2ac/0x3580
[  186.178068][ T8024]  do_filp_open+0x11e/0x1b0
[  186.182575][ T8024]  do_sys_open+0x3b3/0x4f0
[  186.187001][ T8024]  __x64_sys_open+0x55/0x70
[  186.191519][ T8024]  do_syscall_64+0xcc/0x3a0
[  186.196034][ T8024]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  186.201915][ T8024] 
[  186.204249][ T8024] write to 0xffff888125742d68 of 2 bytes by task 8024 on cpu 0:
[  186.211889][ T8024]  pid_update_inode+0x51/0x70
[  186.216573][ T8024]  pid_revalidate+0x91/0x120
[  186.221175][ T8024]  lookup_fast+0x612/0x6c0
[  186.225601][ T8024]  path_openat+0x2ac/0x3580
[  186.230113][ T8024]  do_filp_open+0x11e/0x1b0
[  186.234628][ T8024]  do_sys_open+0x3b3/0x4f0
[  186.239054][ T8024]  __x64_sys_open+0x55/0x70
[  186.243566][ T8024]  do_syscall_64+0xcc/0x3a0
[  186.248080][ T8024]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  186.253959][ T8024] 
[  186.256277][ T8024] Reported by Kernel Concurrency Sanitizer on:
[  186.262442][ T8024] CPU: 0 PID: 8024 Comm: ps Not tainted 5.5.0-rc1-syzkaller #0
[  186.269983][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  186.280043][ T8024] ==================================================================
[  186.288104][ T8024] Kernel panic - not syncing: panic_on_warn set ...
[  186.295565][ T8024] CPU: 0 PID: 8024 Comm: ps Not tainted 5.5.0-rc1-syzkaller #0
[  186.303105][ T8024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  186.313248][ T8024] Call Trace:
[  186.316547][ T8024]  dump_stack+0x11d/0x181
[  186.320894][ T8024]  panic+0x210/0x640
[  186.324799][ T8024]  ? vprintk_func+0x8d/0x140
[  186.329424][ T8024]  kcsan_report.cold+0xc/0xd
[  186.334022][ T8024]  kcsan_setup_watchpoint+0x3fe/0x460
[  186.339406][ T8024]  __tsan_unaligned_write2+0xc7/0x110
[  186.344786][ T8024]  pid_update_inode+0x51/0x70
[  186.349464][ T8024]  pid_revalidate+0x91/0x120
[  186.354060][ T8024]  lookup_fast+0x612/0x6c0
[  186.358526][ T8024]  path_openat+0x2ac/0x3580
[  186.363040][ T8024]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  186.369284][ T8024]  ? __sanitizer_cov_trace_switch+0x49/0x80
[  186.375181][ T8024]  ? __read_once_size+0x41/0xe0
[  186.380046][ T8024]  do_filp_open+0x11e/0x1b0
[  186.384566][ T8024]  ? __alloc_fd+0x2ef/0x3b0
[  186.389082][ T8024]  do_sys_open+0x3b3/0x4f0
[  186.393776][ T8024]  __x64_sys_open+0x55/0x70
[  186.398288][ T8024]  do_syscall_64+0xcc/0x3a0
[  186.402811][ T8024]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  186.408719][ T8024] RIP: 0033:0x7f30e72c6120
[  186.413149][ T8024] Code: 48 8b 15 1b 4d 2b 00 f7 d8 64 89 02 83 c8 ff c3 90 90 90 90 90 90 90 90 90 90 83 3d d5 a4 2b 00 00 75 10 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 31 c3 48 83 ec 08 e8 5e 8c 01 00 48 89 04 24
[  186.432753][ T8024] RSP: 002b:00007ffd4094d638 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  186.441194][ T8024] RAX: ffffffffffffffda RBX: 0000000000616760 RCX: 00007f30e72c6120
[  186.449172][ T8024] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007f30e7794d00
[  186.457149][ T8024] RBP: 0000000000001000 R08: 0000000000000000 R09: 00007f30e758e57b
[  186.465125][ T8024] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f30e7793d00
[  186.473102][ T8024] R13: 0000000000000020 R14: 0000000000000005 R15: 0000000000000000
[  186.482450][ T8024] Kernel Offset: disabled
[  186.486778][ T8024] Rebooting in 86400 seconds..