[   37.038850] audit: type=1800 audit(1551419612.682:27): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[   37.064731] audit: type=1800 audit(1551419612.682:28): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[   37.753048] audit: type=1800 audit(1551419613.442:29): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0
[   37.771892] audit: type=1800 audit(1551419613.452:30): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.193' (ECDSA) to the list of known hosts.
2019/03/01 05:53:43 fuzzer started
2019/03/01 05:53:46 dialing manager at 10.128.0.26:45657
2019/03/01 05:53:49 syscalls: 1
2019/03/01 05:53:49 code coverage: enabled
2019/03/01 05:53:49 comparison tracing: enabled
2019/03/01 05:53:49 extra coverage: extra coverage is not supported by the kernel
2019/03/01 05:53:49 setuid sandbox: enabled
2019/03/01 05:53:49 namespace sandbox: enabled
2019/03/01 05:53:49 Android sandbox: /sys/fs/selinux/policy does not exist
2019/03/01 05:53:49 fault injection: enabled
2019/03/01 05:53:49 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/03/01 05:53:49 net packet injection: enabled
2019/03/01 05:53:49 net device setup: enabled
05:54:30 executing program 0:
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$getsig(0x4202, r0, 0x0, 0x0)

syzkaller login: [   94.778626] IPVS: ftp: loaded support on port[0] = 21
05:54:30 executing program 1:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

[   94.874005] chnl_net:caif_netlink_parms(): no params data found
[   94.927901] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.944892] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.952399] device bridge_slave_0 entered promiscuous mode
[   94.966000] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.972422] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.995336] device bridge_slave_1 entered promiscuous mode
[   95.035475] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   95.045027] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   95.067915] team0: Port device team_slave_0 added
[   95.074282] team0: Port device team_slave_1 added
05:54:30 executing program 2:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

[   95.157387] device hsr_slave_0 entered promiscuous mode
[   95.194749] device hsr_slave_1 entered promiscuous mode
[   95.249115] IPVS: ftp: loaded support on port[0] = 21
[   95.263998] IPVS: ftp: loaded support on port[0] = 21
[   95.272452] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.279237] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.286372] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.292746] bridge0: port 1(bridge_slave_0) entered forwarding state
05:54:31 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

[   95.452225] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.522557] 8021q: adding VLAN 0 to HW filter on device team0
[   95.567847] chnl_net:caif_netlink_parms(): no params data found
[   95.576412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.586764] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.604534] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.612395] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   95.635286] chnl_net:caif_netlink_parms(): no params data found
[   95.647850] IPVS: ftp: loaded support on port[0] = 21
05:54:31 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

[   95.669832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.680641] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.687052] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.771725] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.794492] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.801756] device bridge_slave_0 entered promiscuous mode
[   95.828025] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.838806] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.845234] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.877124] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.883506] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.893963] device bridge_slave_1 entered promiscuous mode
[   95.926648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.935834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.948522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.956477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.967369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.981261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   95.982600] IPVS: ftp: loaded support on port[0] = 21
[   95.994183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.019066] bridge0: port 1(bridge_slave_0) entered blocking state
05:54:31 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)
poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0)

[   96.029026] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.036845] device bridge_slave_0 entered promiscuous mode
[   96.045560] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   96.053233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   96.065655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   96.078291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   96.087521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   96.098382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   96.106804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   96.129028] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.142335] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.151992] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.159045] device bridge_slave_1 entered promiscuous mode
[   96.171606] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   96.187815] IPVS: ftp: loaded support on port[0] = 21
[   96.213782] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   96.243909] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   96.291250] team0: Port device team_slave_0 added
[   96.312719] team0: Port device team_slave_0 added
[   96.332217] team0: Port device team_slave_1 added
[   96.345724] team0: Port device team_slave_1 added
[   96.416337] device hsr_slave_0 entered promiscuous mode
[   96.454812] device hsr_slave_1 entered promiscuous mode
[   96.577325] device hsr_slave_0 entered promiscuous mode
[   96.634719] device hsr_slave_1 entered promiscuous mode
[   96.678968] chnl_net:caif_netlink_parms(): no params data found
[   96.768160] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.775561] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.782447] device bridge_slave_0 entered promiscuous mode
[   96.812001] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.819556] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.827024] device bridge_slave_1 entered promiscuous mode
[   96.844234] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.850657] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.857334] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.863696] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.872357] chnl_net:caif_netlink_parms(): no params data found
[   96.905703] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.913846] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.931765] chnl_net:caif_netlink_parms(): no params data found
[   96.964353] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   96.996884] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   97.049668] team0: Port device team_slave_0 added
[   97.059708] team0: Port device team_slave_1 added
[   97.066872] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.073334] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.080537] device bridge_slave_0 entered promiscuous mode
[   97.087199] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.093657] bridge0: port 1(bridge_slave_0) entered disabled state
05:54:32 executing program 0:
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$getsig(0x4202, r0, 0x0, 0x0)

[   97.103193] device bridge_slave_0 entered promiscuous mode
[   97.127401] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.148113] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.155709] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.163611] device bridge_slave_1 entered promiscuous mode
[   97.177487] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.184246] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.192235] device bridge_slave_1 entered promiscuous mode
[   97.211615] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.266643] device hsr_slave_0 entered promiscuous mode
[   97.304971] device hsr_slave_1 entered promiscuous mode
[   97.353038] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   97.363667] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   97.374463] bond0: Enslaving bond_slave_0 as an active interface with an up link
[   97.383675] bond0: Enslaving bond_slave_1 as an active interface with an up link
[   97.403859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.411032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.431424] team0: Port device team_slave_0 added
[   97.438031] team0: Port device team_slave_1 added
[   97.459273] team0: Port device team_slave_0 added
[   97.467290] 8021q: adding VLAN 0 to HW filter on device team0
[   97.490329] team0: Port device team_slave_1 added
[   97.516685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.525038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.532571] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.538981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.586221] device hsr_slave_0 entered promiscuous mode
[   97.636050] device hsr_slave_1 entered promiscuous mode
[   97.679536] 8021q: adding VLAN 0 to HW filter on device team0
[   97.736103] device hsr_slave_0 entered promiscuous mode
[   97.774874] device hsr_slave_1 entered promiscuous mode
[   97.817878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.826148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.833142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.840312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.848445] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.856515] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.862840] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.901947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.909777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.919605] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.925994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.932814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.940620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
05:54:33 executing program 0:
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$getsig(0x4202, r0, 0x0, 0x0)

[   97.948290] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.954696] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.961513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.006140] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.020322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.028723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.037457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.046457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.053964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.061713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.069603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.077570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.085475] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.114546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.122423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.134873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.142473] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.152971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.164899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   98.176675] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.190980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   98.201220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.212029] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.219231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.226789] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.234190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.241837] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.249473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.257099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.278246] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.290262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   98.344904] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.361592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   98.370394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   98.385555] 8021q: adding VLAN 0 to HW filter on device team0
[   98.393860] hrtimer: interrupt took 62201 ns
[   98.394880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   98.407112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   98.415315] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.421696] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.459535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   98.466792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   98.477387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.485550] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.491945] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.499752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
05:54:34 executing program 1:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

[   98.507946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.516265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.524153] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.532013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.543121] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.552562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.560486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.568351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.576260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.588823] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.603966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.615928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   98.646314] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.692169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   98.700639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   98.735072] 8021q: adding VLAN 0 to HW filter on device team0
[   98.758380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   98.767218] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
05:54:34 executing program 0:
clone(0x200000041fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
ptrace$getsig(0x4202, r0, 0x0, 0x0)

05:54:34 executing program 2:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

05:54:34 executing program 1:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

[   98.783736] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.790162] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.866613] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.882343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   98.907668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
05:54:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

05:54:34 executing program 2:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

[   98.953724] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   98.972819] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.979319] bridge0: port 2(bridge_slave_1) entered forwarding state
05:54:34 executing program 1:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

[   99.038342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   99.072625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
05:54:34 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

[   99.111157] 8021q: adding VLAN 0 to HW filter on device team0
[   99.134156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   99.201409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.222837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   99.242106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   99.256552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   99.288564] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   99.296831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   99.306568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   99.315261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   99.325144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.332810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   99.340594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.360942] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   99.368119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.375171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   99.383040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   99.390894] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.397278] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.404594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   99.412469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   99.420211] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.426603] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.434916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   99.449098] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.464640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   99.472602] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   99.481132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   99.489338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   99.497561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   99.505643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   99.513185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   99.521204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   99.529549] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   99.547332] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   99.558636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   99.569146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   99.577226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   99.611373] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.764663] protocol 88fb is buggy, dev hsr_slave_0
[   99.769937] protocol 88fb is buggy, dev hsr_slave_1
[   99.784901] protocol 88fb is buggy, dev hsr_slave_0
[   99.789987] protocol 88fb is buggy, dev hsr_slave_1
05:54:35 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

05:54:35 executing program 2:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

05:54:35 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

05:54:35 executing program 1:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

05:54:35 executing program 0:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

05:54:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)
poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0)

05:54:35 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

05:54:35 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)
poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0)

05:54:35 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

05:54:35 executing program 1:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

05:54:35 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

05:54:35 executing program 0:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

05:54:36 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

05:54:36 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)
poll(&(0x7f0000000200)=[{r0}], 0x1, 0x0)

05:54:36 executing program 2:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
write$vnet(r0, &(0x7f00000018c0)={0x1, {&(0x7f0000001940)=""/211, 0xd3, 0x0, 0x0, 0x2}}, 0x68)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/246, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
close(r1)
socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[])
write$vnet(r0, &(0x7f00000004c0)={0x1, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x68)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1})

05:54:36 executing program 4:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

05:54:36 executing program 5:
r0 = gettid()
r1 = memfd_create(&(0x7f0000000100)='!-\x00', 0x0)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000940)='/dev/snapshot\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x0, 0x0)
lsetxattr$security_ima(0x0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@sha1={0x1, "a4170918c8ed4178601042b82f28a78c593db9fe"}, 0x15, 0x8042)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0)
fcntl$getownex(r3, 0x10, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
kcmp(r0, r0, 0x0, r2, r2)
setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, 0x0, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000040))
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000240)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0xf658}}, 0x10)
request_key(&(0x7f00000003c0)='\x9b\x19h\n\xb5\xa6H\xdb\xbcW\xb5\x01\x8c\xd9\x95|u.\xbf\x1a\xb6\xf5\x98-\xac\r\xeaJ\xb6\xecg\xc39\xa3\'\xaa\xd0\x94XdX\x92<\xb2\xe4\x1c\f\xb86\x90\x84\x90\xbb\xf9\x00O\xee\x8a\x05E;\xfeJ\x94\x88\n,!', 0x0, 0x0, 0x0)
close(r2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syncfs(r1)

05:54:36 executing program 1:
syz_open_dev$vcsn(0x0, 0x0, 0x100)
prctl$PR_GET_TSC(0x19, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc)
sigaltstack(&(0x7f0000b17000/0x3000)=nil, 0x0)
madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd)

[  100.664548] protocol 88fb is buggy, dev hsr_slave_0
[  100.665022] protocol 88fb is buggy, dev hsr_slave_0
[  100.669711] protocol 88fb is buggy, dev hsr_slave_1
[  100.674749] protocol 88fb is buggy, dev hsr_slave_1
[  100.744646] protocol 88fb is buggy, dev hsr_slave_0
[  100.749818] protocol 88fb is buggy, dev hsr_slave_1
[  104.824477] net_ratelimit: 17 callbacks suppressed
[  104.824498] protocol 88fb is buggy, dev hsr_slave_1
[  104.829491] protocol 88fb is buggy, dev hsr_slave_0
[  104.839523] protocol 88fb is buggy, dev hsr_slave_1
[  104.904477] protocol 88fb is buggy, dev hsr_slave_0
[  104.909569] protocol 88fb is buggy, dev hsr_slave_1
[  105.304470] protocol 88fb is buggy, dev hsr_slave_0
[  105.309551] protocol 88fb is buggy, dev hsr_slave_1
[  105.944482] protocol 88fb is buggy, dev hsr_slave_0
[  105.949608] protocol 88fb is buggy, dev hsr_slave_1
[  106.264474] protocol 88fb is buggy, dev hsr_slave_0
[  110.104468] net_ratelimit: 20 callbacks suppressed
[  110.109461] protocol 88fb is buggy, dev hsr_slave_0
[  110.114513] protocol 88fb is buggy, dev hsr_slave_1
[  110.424488] protocol 88fb is buggy, dev hsr_slave_0
[  110.429582] protocol 88fb is buggy, dev hsr_slave_1
[  111.064483] protocol 88fb is buggy, dev hsr_slave_0
[  111.064505] protocol 88fb is buggy, dev hsr_slave_0
[  111.069575] protocol 88fb is buggy, dev hsr_slave_1
[  111.074754] protocol 88fb is buggy, dev hsr_slave_1
[  111.144473] protocol 88fb is buggy, dev hsr_slave_0
[  111.149736] protocol 88fb is buggy, dev hsr_slave_1
[  115.224471] net_ratelimit: 18 callbacks suppressed
[  115.224479] protocol 88fb is buggy, dev hsr_slave_0
[  115.224499] protocol 88fb is buggy, dev hsr_slave_1
[  115.229482] protocol 88fb is buggy, dev hsr_slave_1
[  115.304470] protocol 88fb is buggy, dev hsr_slave_0
[  115.309563] protocol 88fb is buggy, dev hsr_slave_1
[  115.704469] protocol 88fb is buggy, dev hsr_slave_0
[  115.709545] protocol 88fb is buggy, dev hsr_slave_1
[  116.344555] protocol 88fb is buggy, dev hsr_slave_0
[  116.349662] protocol 88fb is buggy, dev hsr_slave_1
[  116.664482] protocol 88fb is buggy, dev hsr_slave_0
[  120.504507] net_ratelimit: 19 callbacks suppressed
[  120.504516] protocol 88fb is buggy, dev hsr_slave_0
[  120.514574] protocol 88fb is buggy, dev hsr_slave_1
[  120.824477] protocol 88fb is buggy, dev hsr_slave_0
[  120.829551] protocol 88fb is buggy, dev hsr_slave_1
[  121.464486] protocol 88fb is buggy, dev hsr_slave_0
[  121.464492] protocol 88fb is buggy, dev hsr_slave_0
[  121.464533] protocol 88fb is buggy, dev hsr_slave_1
[  121.469576] protocol 88fb is buggy, dev hsr_slave_1
[  121.544467] protocol 88fb is buggy, dev hsr_slave_0
[  121.549555] protocol 88fb is buggy, dev hsr_slave_1
[  125.624468] net_ratelimit: 17 callbacks suppressed
[  125.624476] protocol 88fb is buggy, dev hsr_slave_0
[  125.624497] protocol 88fb is buggy, dev hsr_slave_1
[  125.629475] protocol 88fb is buggy, dev hsr_slave_1
[  125.704475] protocol 88fb is buggy, dev hsr_slave_0
[  125.709571] protocol 88fb is buggy, dev hsr_slave_1
[  126.104564] protocol 88fb is buggy, dev hsr_slave_0
[  126.109677] protocol 88fb is buggy, dev hsr_slave_1
[  126.744472] protocol 88fb is buggy, dev hsr_slave_0
[  126.749592] protocol 88fb is buggy, dev hsr_slave_1
[  127.064466] protocol 88fb is buggy, dev hsr_slave_0
[  130.904465] net_ratelimit: 19 callbacks suppressed
[  130.904475] protocol 88fb is buggy, dev hsr_slave_0
[  130.914510] protocol 88fb is buggy, dev hsr_slave_1
[  131.224468] protocol 88fb is buggy, dev hsr_slave_0
[  131.229533] protocol 88fb is buggy, dev hsr_slave_1
[  131.864475] protocol 88fb is buggy, dev hsr_slave_0
[  131.864481] protocol 88fb is buggy, dev hsr_slave_0
[  131.864531] protocol 88fb is buggy, dev hsr_slave_1
[  131.869562] protocol 88fb is buggy, dev hsr_slave_1
[  131.944490] protocol 88fb is buggy, dev hsr_slave_0
[  131.949587] protocol 88fb is buggy, dev hsr_slave_1
[  136.024469] net_ratelimit: 17 callbacks suppressed
[  136.024478] protocol 88fb is buggy, dev hsr_slave_0
[  136.024496] protocol 88fb is buggy, dev hsr_slave_1
[  136.029474] protocol 88fb is buggy, dev hsr_slave_1
[  136.104471] protocol 88fb is buggy, dev hsr_slave_0
[  136.109560] protocol 88fb is buggy, dev hsr_slave_1
[  136.504523] protocol 88fb is buggy, dev hsr_slave_0
[  136.509688] protocol 88fb is buggy, dev hsr_slave_1
[  137.144438] protocol 88fb is buggy, dev hsr_slave_0
[  137.149685] protocol 88fb is buggy, dev hsr_slave_1
[  137.464493] protocol 88fb is buggy, dev hsr_slave_0
[  141.304474] net_ratelimit: 20 callbacks suppressed
[  141.304482] protocol 88fb is buggy, dev hsr_slave_0
[  141.314536] protocol 88fb is buggy, dev hsr_slave_1
[  141.624465] protocol 88fb is buggy, dev hsr_slave_0
[  141.629538] protocol 88fb is buggy, dev hsr_slave_1
[  142.264472] protocol 88fb is buggy, dev hsr_slave_0
[  142.264498] protocol 88fb is buggy, dev hsr_slave_1
[  142.269554] protocol 88fb is buggy, dev hsr_slave_1
[  142.344506] protocol 88fb is buggy, dev hsr_slave_0
[  142.349622] protocol 88fb is buggy, dev hsr_slave_1
[  142.744500] protocol 88fb is buggy, dev hsr_slave_0
[  146.424482] net_ratelimit: 17 callbacks suppressed
[  146.424491] protocol 88fb is buggy, dev hsr_slave_0
[  146.424496] protocol 88fb is buggy, dev hsr_slave_0
[  146.424546] protocol 88fb is buggy, dev hsr_slave_1
[  146.429491] protocol 88fb is buggy, dev hsr_slave_1
[  146.504478] protocol 88fb is buggy, dev hsr_slave_0
[  146.509564] protocol 88fb is buggy, dev hsr_slave_1
[  146.904499] protocol 88fb is buggy, dev hsr_slave_0
[  146.909579] protocol 88fb is buggy, dev hsr_slave_1
[  147.544485] protocol 88fb is buggy, dev hsr_slave_0
[  147.549611] protocol 88fb is buggy, dev hsr_slave_1
[  151.704486] net_ratelimit: 21 callbacks suppressed
[  151.704495] protocol 88fb is buggy, dev hsr_slave_0
[  151.714559] protocol 88fb is buggy, dev hsr_slave_1
[  152.024484] protocol 88fb is buggy, dev hsr_slave_0
[  152.029560] protocol 88fb is buggy, dev hsr_slave_1
[  152.664491] protocol 88fb is buggy, dev hsr_slave_0
[  152.664516] protocol 88fb is buggy, dev hsr_slave_1
[  152.669596] protocol 88fb is buggy, dev hsr_slave_1
[  152.744469] protocol 88fb is buggy, dev hsr_slave_0
[  152.749558] protocol 88fb is buggy, dev hsr_slave_1
[  153.144466] protocol 88fb is buggy, dev hsr_slave_0
[  156.824479] net_ratelimit: 17 callbacks suppressed
[  156.824488] protocol 88fb is buggy, dev hsr_slave_0
[  156.824496] protocol 88fb is buggy, dev hsr_slave_0
[  156.824569] protocol 88fb is buggy, dev hsr_slave_1
[  156.829494] protocol 88fb is buggy, dev hsr_slave_1
[  156.904471] protocol 88fb is buggy, dev hsr_slave_0
[  156.909542] protocol 88fb is buggy, dev hsr_slave_1
[  157.304815] protocol 88fb is buggy, dev hsr_slave_0
[  157.309916] protocol 88fb is buggy, dev hsr_slave_1
[  157.954730] protocol 88fb is buggy, dev hsr_slave_0
[  157.959850] protocol 88fb is buggy, dev hsr_slave_1
[  162.104487] net_ratelimit: 20 callbacks suppressed
[  162.104495] protocol 88fb is buggy, dev hsr_slave_0
[  162.114544] protocol 88fb is buggy, dev hsr_slave_1
[  162.424763] protocol 88fb is buggy, dev hsr_slave_0
[  162.429836] protocol 88fb is buggy, dev hsr_slave_1
[  163.065085] protocol 88fb is buggy, dev hsr_slave_0
[  163.065676] protocol 88fb is buggy, dev hsr_slave_0
[  163.070168] protocol 88fb is buggy, dev hsr_slave_1
[  163.075222] protocol 88fb is buggy, dev hsr_slave_1
[  163.144491] protocol 88fb is buggy, dev hsr_slave_0
[  163.149587] protocol 88fb is buggy, dev hsr_slave_1
[  167.224471] net_ratelimit: 17 callbacks suppressed
[  167.224500] protocol 88fb is buggy, dev hsr_slave_1
[  167.229483] protocol 88fb is buggy, dev hsr_slave_0
[  167.239495] protocol 88fb is buggy, dev hsr_slave_1
[  167.304480] protocol 88fb is buggy, dev hsr_slave_0
[  167.309593] protocol 88fb is buggy, dev hsr_slave_1
[  167.704471] protocol 88fb is buggy, dev hsr_slave_0
[  167.709547] protocol 88fb is buggy, dev hsr_slave_1
[  168.344515] protocol 88fb is buggy, dev hsr_slave_0
[  168.349648] protocol 88fb is buggy, dev hsr_slave_1
[  168.664539] protocol 88fb is buggy, dev hsr_slave_0
[  172.504480] net_ratelimit: 20 callbacks suppressed
[  172.504489] protocol 88fb is buggy, dev hsr_slave_0
[  172.514544] protocol 88fb is buggy, dev hsr_slave_1
[  172.824482] protocol 88fb is buggy, dev hsr_slave_0
[  172.829574] protocol 88fb is buggy, dev hsr_slave_1
[  173.464469] protocol 88fb is buggy, dev hsr_slave_0
[  173.464495] protocol 88fb is buggy, dev hsr_slave_1
[  173.469552] protocol 88fb is buggy, dev hsr_slave_1
[  173.544478] protocol 88fb is buggy, dev hsr_slave_0
[  173.549571] protocol 88fb is buggy, dev hsr_slave_1
[  173.944494] protocol 88fb is buggy, dev hsr_slave_0
[  177.624477] net_ratelimit: 17 callbacks suppressed
[  177.624485] protocol 88fb is buggy, dev hsr_slave_0
[  177.624506] protocol 88fb is buggy, dev hsr_slave_1
[  177.629495] protocol 88fb is buggy, dev hsr_slave_1
[  177.704464] protocol 88fb is buggy, dev hsr_slave_0
[  177.709525] protocol 88fb is buggy, dev hsr_slave_1
[  178.104497] protocol 88fb is buggy, dev hsr_slave_0
[  178.109596] protocol 88fb is buggy, dev hsr_slave_1
[  178.744472] protocol 88fb is buggy, dev hsr_slave_0
[  178.749615] protocol 88fb is buggy, dev hsr_slave_1
[  179.064475] protocol 88fb is buggy, dev hsr_slave_0
[  182.904469] net_ratelimit: 20 callbacks suppressed
[  182.904477] protocol 88fb is buggy, dev hsr_slave_0
[  182.914559] protocol 88fb is buggy, dev hsr_slave_1
[  183.224537] protocol 88fb is buggy, dev hsr_slave_0
[  183.229707] protocol 88fb is buggy, dev hsr_slave_1
[  183.864468] protocol 88fb is buggy, dev hsr_slave_0
[  183.864474] protocol 88fb is buggy, dev hsr_slave_0
[  183.864523] protocol 88fb is buggy, dev hsr_slave_1
[  183.869546] protocol 88fb is buggy, dev hsr_slave_1
[  183.944439] protocol 88fb is buggy, dev hsr_slave_0
[  183.949506] protocol 88fb is buggy, dev hsr_slave_1
[  188.024501] net_ratelimit: 18 callbacks suppressed
[  188.024552] protocol 88fb is buggy, dev hsr_slave_1
[  188.029495] protocol 88fb is buggy, dev hsr_slave_0
[  188.039528] protocol 88fb is buggy, dev hsr_slave_1
[  188.104500] protocol 88fb is buggy, dev hsr_slave_0
[  188.109590] protocol 88fb is buggy, dev hsr_slave_1
[  188.504480] protocol 88fb is buggy, dev hsr_slave_0
[  188.509559] protocol 88fb is buggy, dev hsr_slave_1
[  189.144479] protocol 88fb is buggy, dev hsr_slave_0
[  189.149744] protocol 88fb is buggy, dev hsr_slave_1
[  189.464483] protocol 88fb is buggy, dev hsr_slave_0
[  193.304467] net_ratelimit: 18 callbacks suppressed
[  193.309456] protocol 88fb is buggy, dev hsr_slave_0
[  193.314509] protocol 88fb is buggy, dev hsr_slave_1
[  193.624472] protocol 88fb is buggy, dev hsr_slave_0
[  193.629547] protocol 88fb is buggy, dev hsr_slave_1
[  194.264473] protocol 88fb is buggy, dev hsr_slave_0
[  194.264479] protocol 88fb is buggy, dev hsr_slave_0
[  194.264528] protocol 88fb is buggy, dev hsr_slave_1
[  194.269557] protocol 88fb is buggy, dev hsr_slave_1
[  194.344461] protocol 88fb is buggy, dev hsr_slave_0
[  194.349513] protocol 88fb is buggy, dev hsr_slave_1
[  198.424468] net_ratelimit: 18 callbacks suppressed
[  198.424476] protocol 88fb is buggy, dev hsr_slave_0
[  198.424499] protocol 88fb is buggy, dev hsr_slave_1
[  198.429470] protocol 88fb is buggy, dev hsr_slave_1
[  198.514480] protocol 88fb is buggy, dev hsr_slave_0
[  198.519582] protocol 88fb is buggy, dev hsr_slave_1
[  198.904497] protocol 88fb is buggy, dev hsr_slave_0
[  198.909621] protocol 88fb is buggy, dev hsr_slave_1
[  199.544506] protocol 88fb is buggy, dev hsr_slave_0
[  199.549597] protocol 88fb is buggy, dev hsr_slave_1
[  199.864468] protocol 88fb is buggy, dev hsr_slave_0
[  203.704466] net_ratelimit: 18 callbacks suppressed
[  203.704475] protocol 88fb is buggy, dev hsr_slave_0
[  203.714520] protocol 88fb is buggy, dev hsr_slave_1
[  204.024469] protocol 88fb is buggy, dev hsr_slave_0
[  204.029546] protocol 88fb is buggy, dev hsr_slave_1
[  204.664473] protocol 88fb is buggy, dev hsr_slave_0
[  204.664519] protocol 88fb is buggy, dev hsr_slave_1
[  204.669581] protocol 88fb is buggy, dev hsr_slave_1
[  204.744482] protocol 88fb is buggy, dev hsr_slave_0
[  204.749593] protocol 88fb is buggy, dev hsr_slave_1
[  205.144474] protocol 88fb is buggy, dev hsr_slave_0
[  208.824471] net_ratelimit: 17 callbacks suppressed
[  208.824479] protocol 88fb is buggy, dev hsr_slave_0
[  208.824507] protocol 88fb is buggy, dev hsr_slave_1
[  208.829478] protocol 88fb is buggy, dev hsr_slave_1
[  208.904479] protocol 88fb is buggy, dev hsr_slave_0
[  208.909565] protocol 88fb is buggy, dev hsr_slave_1
[  209.304489] protocol 88fb is buggy, dev hsr_slave_0
[  209.309567] protocol 88fb is buggy, dev hsr_slave_1
[  209.944470] protocol 88fb is buggy, dev hsr_slave_0
[  209.949567] protocol 88fb is buggy, dev hsr_slave_1
[  210.264478] protocol 88fb is buggy, dev hsr_slave_0
[  214.104483] net_ratelimit: 19 callbacks suppressed
[  214.109487] protocol 88fb is buggy, dev hsr_slave_0
[  214.114560] protocol 88fb is buggy, dev hsr_slave_1
[  214.424483] protocol 88fb is buggy, dev hsr_slave_0
[  214.429556] protocol 88fb is buggy, dev hsr_slave_1
[  215.064466] protocol 88fb is buggy, dev hsr_slave_0
[  215.064493] protocol 88fb is buggy, dev hsr_slave_1
[  215.069567] protocol 88fb is buggy, dev hsr_slave_1
[  215.144464] protocol 88fb is buggy, dev hsr_slave_0
[  215.149550] protocol 88fb is buggy, dev hsr_slave_1
[  215.544528] protocol 88fb is buggy, dev hsr_slave_0
[  219.224569] net_ratelimit: 15 callbacks suppressed
[  219.224578] protocol 88fb is buggy, dev hsr_slave_0
[  219.234477] protocol 88fb is buggy, dev hsr_slave_0
[  219.234651] protocol 88fb is buggy, dev hsr_slave_1
[  219.239596] protocol 88fb is buggy, dev hsr_slave_1
[  219.314481] protocol 88fb is buggy, dev hsr_slave_0
[  219.319566] protocol 88fb is buggy, dev hsr_slave_1
[  219.704476] protocol 88fb is buggy, dev hsr_slave_0
[  219.709571] protocol 88fb is buggy, dev hsr_slave_1
[  220.344512] protocol 88fb is buggy, dev hsr_slave_0
[  220.349612] protocol 88fb is buggy, dev hsr_slave_1
[  224.506395] net_ratelimit: 18 callbacks suppressed
[  224.506404] protocol 88fb is buggy, dev hsr_slave_0
[  224.516478] protocol 88fb is buggy, dev hsr_slave_1
[  224.824471] protocol 88fb is buggy, dev hsr_slave_0
[  224.829597] protocol 88fb is buggy, dev hsr_slave_1
[  225.464465] protocol 88fb is buggy, dev hsr_slave_0
[  225.464480] protocol 88fb is buggy, dev hsr_slave_0
[  225.469554] protocol 88fb is buggy, dev hsr_slave_1
[  225.474582] protocol 88fb is buggy, dev hsr_slave_1
[  225.544476] protocol 88fb is buggy, dev hsr_slave_0
[  225.549586] protocol 88fb is buggy, dev hsr_slave_1
[  229.626147] net_ratelimit: 18 callbacks suppressed
[  229.627515] protocol 88fb is buggy, dev hsr_slave_0
[  229.631152] protocol 88fb is buggy, dev hsr_slave_0
[  229.636246] protocol 88fb is buggy, dev hsr_slave_1
[  229.641212] protocol 88fb is buggy, dev hsr_slave_1
[  229.704489] protocol 88fb is buggy, dev hsr_slave_0
[  229.709688] protocol 88fb is buggy, dev hsr_slave_1
[  230.104498] protocol 88fb is buggy, dev hsr_slave_0
[  230.109834] protocol 88fb is buggy, dev hsr_slave_1
[  230.744478] protocol 88fb is buggy, dev hsr_slave_0
[  230.749586] protocol 88fb is buggy, dev hsr_slave_1
[  234.904501] net_ratelimit: 20 callbacks suppressed
[  234.904509] protocol 88fb is buggy, dev hsr_slave_0
[  234.914776] protocol 88fb is buggy, dev hsr_slave_1
[  235.224480] protocol 88fb is buggy, dev hsr_slave_0
[  235.229567] protocol 88fb is buggy, dev hsr_slave_1
[  235.864479] protocol 88fb is buggy, dev hsr_slave_0
[  235.864484] protocol 88fb is buggy, dev hsr_slave_0
[  235.864548] protocol 88fb is buggy, dev hsr_slave_1
[  235.869737] protocol 88fb is buggy, dev hsr_slave_1
[  235.944501] protocol 88fb is buggy, dev hsr_slave_0
[  235.949745] protocol 88fb is buggy, dev hsr_slave_1
[  240.024464] net_ratelimit: 18 callbacks suppressed
[  240.024473] protocol 88fb is buggy, dev hsr_slave_0
[  240.024493] protocol 88fb is buggy, dev hsr_slave_1
[  240.029464] protocol 88fb is buggy, dev hsr_slave_1
[  240.104464] protocol 88fb is buggy, dev hsr_slave_0
[  240.109584] protocol 88fb is buggy, dev hsr_slave_1
[  240.504503] protocol 88fb is buggy, dev hsr_slave_0
[  240.509580] protocol 88fb is buggy, dev hsr_slave_1
[  241.144467] protocol 88fb is buggy, dev hsr_slave_0
[  241.150051] protocol 88fb is buggy, dev hsr_slave_1
[  241.464471] protocol 88fb is buggy, dev hsr_slave_0
[  245.304481] net_ratelimit: 19 callbacks suppressed
[  245.304489] protocol 88fb is buggy, dev hsr_slave_0
[  245.314544] protocol 88fb is buggy, dev hsr_slave_1
[  245.624478] protocol 88fb is buggy, dev hsr_slave_0
[  245.629571] protocol 88fb is buggy, dev hsr_slave_1
[  246.264474] protocol 88fb is buggy, dev hsr_slave_0
[  246.264500] protocol 88fb is buggy, dev hsr_slave_1
[  246.269554] protocol 88fb is buggy, dev hsr_slave_1
[  246.344504] protocol 88fb is buggy, dev hsr_slave_0
[  246.349591] protocol 88fb is buggy, dev hsr_slave_1
[  246.744477] protocol 88fb is buggy, dev hsr_slave_0
[  250.424477] net_ratelimit: 17 callbacks suppressed
[  250.424489] protocol 88fb is buggy, dev hsr_slave_0
[  250.424530] protocol 88fb is buggy, dev hsr_slave_1
[  250.429467] protocol 88fb is buggy, dev hsr_slave_0
[  250.444530] protocol 88fb is buggy, dev hsr_slave_1
[  250.504474] protocol 88fb is buggy, dev hsr_slave_0
[  250.509564] protocol 88fb is buggy, dev hsr_slave_1
[  250.904473] protocol 88fb is buggy, dev hsr_slave_0
[  250.909551] protocol 88fb is buggy, dev hsr_slave_1
[  251.544495] protocol 88fb is buggy, dev hsr_slave_0
[  251.549616] protocol 88fb is buggy, dev hsr_slave_1
[  255.704485] net_ratelimit: 19 callbacks suppressed
[  255.709479] protocol 88fb is buggy, dev hsr_slave_0
[  255.714531] protocol 88fb is buggy, dev hsr_slave_1
[  256.024470] protocol 88fb is buggy, dev hsr_slave_0
[  256.029549] protocol 88fb is buggy, dev hsr_slave_1
[  256.664468] protocol 88fb is buggy, dev hsr_slave_0
[  256.664498] protocol 88fb is buggy, dev hsr_slave_1
[  256.669566] protocol 88fb is buggy, dev hsr_slave_1
[  256.744471] protocol 88fb is buggy, dev hsr_slave_0
[  256.749561] protocol 88fb is buggy, dev hsr_slave_1
[  257.144565] protocol 88fb is buggy, dev hsr_slave_0
[  258.424625] INFO: task syz-executor.3:7805 blocked for more than 140 seconds.
[  258.432053]       Not tainted 5.0.0-rc8+ #88
[  258.442403] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  258.451456] syz-executor.3  D28224  7805   7688 0x00000004
[  258.463049] Call Trace:
[  258.465935]  __schedule+0x817/0x1cc0
[  258.469662]  ? __mutex_lock+0x721/0x1310
[  258.473736]  ? pci_mmcfg_check_reserved+0x170/0x170
[  258.484637]  schedule+0x92/0x180
[  258.488022]  schedule_preempt_disabled+0x13/0x20
[  258.492779]  __mutex_lock+0x726/0x1310
[  258.501605]  ? ext4_set_page_dirty+0x275/0x430
[  258.507416]  ? vhost_net_stop_vq+0x2d/0x120
[  258.511781]  ? mutex_trylock+0x1e0/0x1e0
[  258.520781]  ? kasan_check_write+0x14/0x20
[  258.526236]  ? __mutex_unlock_slowpath+0xf8/0x6b0
[  258.531093]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  258.541398]  ? wait_for_completion+0x440/0x440
[  258.547277]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  258.552835]  mutex_lock_nested+0x16/0x20
[  258.562143]  ? mutex_lock_nested+0x16/0x20
[  258.567603]  vhost_net_stop_vq+0x2d/0x120
[  258.571769]  ? handle_rx_kick+0x50/0x50
[  258.581435]  vhost_net_release+0x5d/0x260
[  258.586857]  __fput+0x2df/0x8d0
[  258.590153]  ____fput+0x16/0x20
[  258.593434]  task_work_run+0x14a/0x1c0
[  258.602331]  exit_to_usermode_loop+0x273/0x2c0
[  258.608151]  do_syscall_64+0x52d/0x610
[  258.612056]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  258.622145] RIP: 0033:0x411d31
[  258.626555] Code: be b3 34 01 00 00 31 c0 bf bb 36 44 00 e8 17 f3 00 00 8b b3 30 01 00 00 31 c0 bf d0 36 44 00 e8 05 f3 00 00 8b b3 08 01 00 00 <31> c0 bf e4 36 44 00 e8 f3 f2 00 00 8b 83 e0 00 00 00 48 89 ee bf
[  258.651364] RSP: 002b:00007fff729ccb20 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  258.659395] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000411d31
[  258.672565] RDX: 0000001b2c020000 RSI: 0000000000740b28 RDI: 0000000000000003
[  258.680135] RBP: 0000000000000000 R08: ffffffff8133798f R09: 00000000ecafd202
[  258.693271] R10: 00007fff729cca50 R11: 0000000000000293 R12: 0000000000000000
[  258.700839] R13: 0000000000000001 R14: 0000000000000004 R15: 0000000000000003
[  258.714722]  ? __cpu_to_node+0xf/0xa0
[  258.718539] 
[  258.718539] Showing all locks held in the system:
[  258.730788] 1 lock held by khungtaskd/1041:
[  258.735453]  #0: 00000000fa377b11 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e
[  258.744098] 1 lock held by rsyslogd/7550:
[  258.754584]  #0: 00000000500d6f5f (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[  258.762502] 2 locks held by getty/7639:
[  258.772743]  #0: 000000000e886a17 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.781270]  #1: 000000009e16de76 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.796004] 2 locks held by getty/7640:
[  258.799977]  #0: 00000000faf5f204 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.812182]  #1: 00000000f798d053 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.823303] 2 locks held by getty/7641:
[  258.831609]  #0: 000000001e8ae1ed (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.842057]  #1: 0000000032eb8c50 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.857606] 2 locks held by getty/7642:
[  258.861589]  #0: 00000000bb0570c7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.872964]  #1: 000000000f78f82d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.887706] 2 locks held by getty/7643:
[  258.891680]  #0: 00000000cf3e255a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.910869]  #1: 0000000038995980 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.921076] 2 locks held by getty/7644:
[  258.929952]  #0: 00000000eaf33bbb (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.939444]  #1: 00000000c813f73e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.953261] 2 locks held by getty/7645:
[  258.958445]  #0: 000000008f2b9a21 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  258.971744]  #1: 00000000547717c9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70
[  258.981919] 1 lock held by syz-executor.3/7805:
[  258.993533]  #0: 00000000a1a43fc0 (&vq->mutex){+.+.}, at: vhost_net_stop_vq+0x2d/0x120
[  259.002846] 1 lock held by vhost-7806/7807:
[  259.012002] 
[  259.013635] =============================================
[  259.013635] 
[  259.021866] NMI backtrace for cpu 1
[  259.025601] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.0.0-rc8+ #88
[  259.032560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  259.041917] Call Trace:
[  259.044511]  dump_stack+0x172/0x1f0
[  259.048146]  nmi_cpu_backtrace.cold+0x63/0xa4
[  259.052643]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  259.057576]  nmi_trigger_cpumask_backtrace+0x1be/0x236
[  259.062856]  arch_trigger_cpumask_backtrace+0x14/0x20
[  259.068049]  watchdog+0x9df/0xee0
[  259.071516]  kthread+0x357/0x430
[  259.074915]  ? reset_hung_task_detector+0x30/0x30
[  259.079760]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  259.085320]  ret_from_fork+0x3a/0x50
[  259.089153] Sending NMI from CPU 1 to CPUs 0:
[  259.094204] NMI backtrace for cpu 0
[  259.094211] CPU: 0 PID: 7807 Comm: vhost-7806 Not tainted 5.0.0-rc8+ #88
[  259.094218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  259.094222] RIP: 0010:__sanitizer_cov_trace_pc+0x26/0x50
[  259.094234] Code: 90 90 90 90 55 48 89 e5 48 8b 75 08 65 48 8b 04 25 40 ee 01 00 65 8b 15 98 0e 92 7e 81 e2 00 01 1f 00 75 2b 8b 90 d8 12 00 00 <83> fa 02 75 20 48 8b 88 e0 12 00 00 8b 80 dc 12 00 00 48 8b 11 48
[  259.094239] RSP: 0018:ffff888069b07a98 EFLAGS: 00000246
[  259.094248] RAX: ffff888069ade2c0 RBX: ffff88808a357c00 RCX: ffffffff853d3831
[  259.094253] RDX: 0000000000000000 RSI: ffffffff853d3863 RDI: ffff88808a357c10
[  259.094259] RBP: ffff888069b07a98 R08: ffff888069ade2c0 R09: ffffed100d354198
[  259.094264] R10: ffff888069b07b68 R11: ffff888069aa0cbb R12: 0000000000000000
[  259.094270] R13: ffff88808a357580 R14: 000000000000000f R15: dffffc0000000000
[  259.094276] FS:  0000000000000000(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000
[  259.094284] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  259.094290] CR2: ffffffffff600400 CR3: 0000000089d76000 CR4: 00000000001406f0
[  259.094296] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  259.094301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  259.094304] Call Trace:
[  259.094308]  iotlb_access_ok+0x253/0x540
[  259.094312]  vq_iotlb_prefetch+0x114/0x230
[  259.094316]  handle_rx+0x149/0x1900
[  259.094320]  ? finish_task_switch+0x146/0x790
[  259.094324]  ? find_held_lock+0x35/0x130
[  259.094328]  ? finish_task_switch+0x146/0x790
[  259.094332]  ? _raw_spin_unlock_irq+0x28/0x90
[  259.094337]  ? finish_task_switch+0x146/0x790
[  259.094341]  ? _raw_spin_unlock_irq+0x28/0x90
[  259.094345]  ? lockdep_hardirqs_on+0x415/0x5d0
[  259.094349]  ? vhost_net_open+0x8e0/0x8e0
[  259.094353]  ? trace_hardirqs_on+0x67/0x230
[  259.094357]  ? enable_cpucache.cold+0x4/0x24
[  259.094365]  ? _raw_spin_unlock_irq+0x5e/0x90
[  259.094369]  ? dec_ucount+0xa0/0x250
[  259.094373]  ? __switch_to_asm+0x34/0x70
[  259.094377]  ? __switch_to_asm+0x40/0x70
[  259.094380]  ? __schedule+0x81f/0x1cc0
[  259.094385]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  259.094388]  handle_rx_net+0x19/0x20
[  259.094392]  vhost_worker+0x2a2/0x4a0
[  259.094396]  ? vhost_flush_work+0x20/0x20
[  259.094400]  ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[  259.094405]  ? __kthread_parkme+0xfb/0x1b0
[  259.094408]  kthread+0x357/0x430
[  259.094412]  ? vhost_flush_work+0x20/0x20
[  259.094417]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  259.094421]  ret_from_fork+0x3a/0x50
[  259.096486] Kernel panic - not syncing: hung_task: blocked tasks
[  259.344320] CPU: 1 PID: 1041 Comm: khungtaskd Not tainted 5.0.0-rc8+ #88
[  259.351155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  259.360503] Call Trace:
[  259.363121]  dump_stack+0x172/0x1f0
[  259.366758]  panic+0x2cb/0x65c
[  259.369954]  ? __warn_printk+0xf3/0xf3
[  259.373848]  ? lapic_can_unplug_cpu.cold+0x38/0x38
[  259.378780]  ? ___preempt_schedule+0x16/0x18
[  259.383195]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  259.388649]  ? nmi_trigger_cpumask_backtrace+0x1fa/0x236
[  259.394102]  ? nmi_trigger_cpumask_backtrace+0x204/0x236
[  259.399555]  ? nmi_trigger_cpumask_backtrace+0x19e/0x236
[  259.405014]  watchdog+0x9f0/0xee0
[  259.408478]  kthread+0x357/0x430
[  259.411844]  ? reset_hung_task_detector+0x30/0x30
[  259.416691]  ? kthread_cancel_delayed_work_sync+0x20/0x20
[  259.422232]  ret_from_fork+0x3a/0x50
[  259.427167] Kernel Offset: disabled
[  259.430801] Rebooting in 86400 seconds..