[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   56.413027][   T27] audit: type=1800 audit(1573971659.188:25): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0
[   56.445800][   T27] audit: type=1800 audit(1573971659.188:26): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0
[   56.500860][   T27] audit: type=1800 audit(1573971659.188:27): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.15.204' (ECDSA) to the list of known hosts.
2019/11/17 06:21:08 fuzzer started
2019/11/17 06:21:09 dialing manager at 10.128.0.26:44591
2019/11/17 06:21:10 syscalls: 2566
2019/11/17 06:21:10 code coverage: enabled
2019/11/17 06:21:10 comparison tracing: enabled
2019/11/17 06:21:10 extra coverage: enabled
2019/11/17 06:21:10 setuid sandbox: enabled
2019/11/17 06:21:10 namespace sandbox: enabled
2019/11/17 06:21:10 Android sandbox: /sys/fs/selinux/policy does not exist
2019/11/17 06:21:10 fault injection: enabled
2019/11/17 06:21:10 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/11/17 06:21:10 net packet injection: enabled
2019/11/17 06:21:10 net device setup: enabled
2019/11/17 06:21:10 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/11/17 06:21:10 devlink PCI setup: PCI device 0000:00:10.0 is not available
06:23:55 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, 0x0)
creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6074bb566d03)
r0 = open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$lock(r0, 0x26, &(0x7f0000000040))
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x51, r0, 0x0)

syzkaller login: [  232.636041][ T8890] IPVS: ftp: loaded support on port[0] = 21
06:23:55 executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000cffff0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f800000016000900000000000000000000000000000000000000000000000000ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff02000000000000000000000000000100000000330000000000000000000000000000000000000100000000984eddd42ef7b54cd8cd040adb4fb395000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000461e124dabd600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000007f0000"], 0xf8}}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@flushsa={0x14, 0x1c, 0x301, 0x0, 0x0, {0x33}}, 0x14}}, 0x0)

[  232.776614][ T8890] chnl_net:caif_netlink_parms(): no params data found
[  232.861082][ T8890] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.869445][ T8890] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.879152][ T8890] device bridge_slave_0 entered promiscuous mode
[  232.888846][ T8890] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.897277][ T8890] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.905328][ T8890] device bridge_slave_1 entered promiscuous mode
[  232.917281][ T8893] IPVS: ftp: loaded support on port[0] = 21
[  232.956601][ T8890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.968773][ T8890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
06:23:55 executing program 2:
r0 = socket(0x2, 0x3, 0x7)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='bridge0\x00', 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x6a0000e0}, 0x6e)

[  233.015190][ T8890] team0: Port device team_slave_0 added
[  233.038628][ T8890] team0: Port device team_slave_1 added
[  233.120190][ T8890] device hsr_slave_0 entered promiscuous mode
[  233.176090][ T8890] device hsr_slave_1 entered promiscuous mode
06:23:56 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78)

[  233.273294][ T8895] IPVS: ftp: loaded support on port[0] = 21
[  233.396816][ T8893] chnl_net:caif_netlink_parms(): no params data found
[  233.432421][ T8890] netdevsim netdevsim0 netdevsim0: renamed from eth0
06:23:56 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(r0, &(0x7f0000000000), 0xffffffffffffff66)
ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f00000004c0)='cpuset.effective_cpus\x00O\x95\xcb2^]\x9b\xb4M\xf8\x04x\xa1\xe6\x88\xe2\xad\xac\x81\x83\x8e1\x7f\xf9\x85\xec\xcc\xb8?\xf9T\n,\x9dCx\xd3-C6\xd8,\xffq\x05\xa8w\xffg\x9d\xfe\xba\xaa\xf3k\xeb\x93[\xc4\xd9\xb4CY\xdeW\x92!\xaan\x1e\x98\"\x86Hz5/\xf8(\xabWA\x84A\b\xcf\xa9\x81w\xc7\x84\xb2\xa0s\x1b\x907\x84\xaae', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0xa, 0x300)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000003000020000000ac0be1c3fd359c9c71cea87013a44180ae7bf8a8d8fb9fa5d732f76e009ba6d9132c033ecc3a9a1876c85f1a536fe44a482e6a1e3a3c4d798391dad5e1abd8df72da36627c1bd9d3778c3aa602e77c74c3ea464cf162efacc6f838523c68abfbe4d6c2d130cc95c307674699cf02162d21aca16da11621b265bbee6f093c34ed1e6943534e254d00000000bc99d51a5a5c967001ce0b3887ab6daee860e8acbf8a25da607f072162c218acc8c01f349945444895d8f0d3fb46d44c10f527922225e361c9858d19841db720cfe6f4789eec71"], 0x0, 0x1b}, 0x20)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000400))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161)
sendmsg$kcm(r6, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1758e83a0006656dbfda9b8985481f0c885415cc28f146f040603834495ee08eb9aaab4223c61f71b5ac31d94a48406c0aa27995001e47bc54f945e9fab2ed08d03868908bd31a7b37e0300537c6a5a61c1e63b4451334f6fd85f3bf83501e505284f59f204d16cd96e952ef2ff6f00d5d004d"], 0xfdef)

[  233.532697][ T8890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  233.542855][ T8898] IPVS: ftp: loaded support on port[0] = 21
[  233.581406][ T8890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  233.700588][ T8890] netdevsim netdevsim0 netdevsim3: renamed from eth3
06:23:56 executing program 5:
syz_open_dev$sg(0x0, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000002740)=ANY=[@ANYBLOB], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x2c, r1, 0x23f, 0x0, 0x25dfdbfc, {{}, 0x0, 0xb, 0x0, {0x10, 0x14, 'broadcalink\x00'}}}, 0x2c}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socket$inet_sctp(0x2, 0x0, 0x84)
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)

[  233.778730][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.787074][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.799098][ T8893] device bridge_slave_0 entered promiscuous mode
[  233.871465][ T8900] IPVS: ftp: loaded support on port[0] = 21
[  233.880976][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.889236][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.898225][ T8893] device bridge_slave_1 entered promiscuous mode
[  233.939632][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  233.951776][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.994932][ T8893] team0: Port device team_slave_0 added
[  234.009235][ T8903] IPVS: ftp: loaded support on port[0] = 21
[  234.019411][ T8893] team0: Port device team_slave_1 added
[  234.037631][ T8895] chnl_net:caif_netlink_parms(): no params data found
[  234.149143][ T8893] device hsr_slave_0 entered promiscuous mode
[  234.206113][ T8893] device hsr_slave_1 entered promiscuous mode
[  234.265847][ T8893] debugfs: Directory 'hsr0' with parent '/' already present!
[  234.336441][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.343590][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.351498][ T8895] device bridge_slave_0 entered promiscuous mode
[  234.371274][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.378469][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.387434][ T8895] device bridge_slave_1 entered promiscuous mode
[  234.420003][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.465095][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.483000][ T8893] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  234.538670][ T8893] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  234.608018][ T8898] chnl_net:caif_netlink_parms(): no params data found
[  234.652527][ T8893] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  234.702010][ T8893] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  234.763168][ T8890] 8021q: adding VLAN 0 to HW filter on device bond0
[  234.807168][ T8895] team0: Port device team_slave_0 added
[  234.816369][ T8895] team0: Port device team_slave_1 added
[  234.826439][ T8900] chnl_net:caif_netlink_parms(): no params data found
[  234.918755][ T8895] device hsr_slave_0 entered promiscuous mode
[  234.967226][ T8895] device hsr_slave_1 entered promiscuous mode
[  235.005835][ T8895] debugfs: Directory 'hsr0' with parent '/' already present!
[  235.021131][ T8898] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.029306][ T8898] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.037526][ T8898] device bridge_slave_0 entered promiscuous mode
[  235.048877][ T8898] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.055991][ T8898] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.063879][ T8898] device bridge_slave_1 entered promiscuous mode
[  235.086460][ T8898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.117911][ T8903] chnl_net:caif_netlink_parms(): no params data found
[  235.128270][ T8898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.155130][ T8898] team0: Port device team_slave_0 added
[  235.167626][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.176948][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  235.194987][ T8900] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.202312][ T8900] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.210758][ T8900] device bridge_slave_0 entered promiscuous mode
[  235.228409][ T8898] team0: Port device team_slave_1 added
[  235.237195][ T8890] 8021q: adding VLAN 0 to HW filter on device team0
[  235.250558][ T8900] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.258183][ T8900] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.267183][ T8900] device bridge_slave_1 entered promiscuous mode
[  235.294484][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.302024][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.309967][ T8903] device bridge_slave_0 entered promiscuous mode
[  235.338400][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  235.347265][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  235.355728][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.362970][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.371269][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.380415][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.388923][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.396029][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.403546][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.412378][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.442218][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.451082][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.467288][ T8903] device bridge_slave_1 entered promiscuous mode
[  235.491396][ T8903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.505525][ T8895] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  235.599301][ T8898] device hsr_slave_0 entered promiscuous mode
[  235.636249][ T8898] device hsr_slave_1 entered promiscuous mode
[  235.675851][ T8898] debugfs: Directory 'hsr0' with parent '/' already present!
[  235.686628][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  235.698069][ T8903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.709522][ T8900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  235.720752][ T8900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.730904][ T8895] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  235.777704][ T8895] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  235.818028][ T8895] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  235.914744][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.923841][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.932787][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  235.941563][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  235.952611][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.990036][ T8900] team0: Port device team_slave_0 added
[  236.001759][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  236.013391][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  236.022651][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  236.033129][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  236.043765][ T8903] team0: Port device team_slave_0 added
[  236.055079][ T8903] team0: Port device team_slave_1 added
[  236.066923][ T8900] team0: Port device team_slave_1 added
[  236.078054][ T8890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  236.116621][ T8893] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.126595][ T8898] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  236.163134][ T8898] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  236.269150][ T8900] device hsr_slave_0 entered promiscuous mode
[  236.316302][ T8900] device hsr_slave_1 entered promiscuous mode
[  236.355868][ T8900] debugfs: Directory 'hsr0' with parent '/' already present!
[  236.365974][ T8898] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  236.424142][ T8898] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  236.496313][ T8893] 8021q: adding VLAN 0 to HW filter on device team0
[  236.569270][ T8903] device hsr_slave_0 entered promiscuous mode
[  236.616193][ T8903] device hsr_slave_1 entered promiscuous mode
[  236.655808][ T8903] debugfs: Directory 'hsr0' with parent '/' already present!
[  236.670096][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  236.678092][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  236.686170][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  236.693838][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.727568][ T8890] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.788980][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.799450][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.809257][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.816411][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.824024][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.834092][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.842671][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.849832][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.880908][ T8900] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  236.940513][ T8900] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  236.978578][   T27] kauditd_printk_skb: 3 callbacks suppressed
[  236.978592][   T27] audit: type=1804 audit(1573971839.758:31): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir558942416/syzkaller.8yzxS0/0/file0/bus" dev="ramfs" ino=28101 res=1
[  237.012756][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  237.030621][ T8903] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  237.068458][ T8900] netdevsim netdevsim4 netdevsim2: renamed from eth2
06:23:59 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
poll(&(0x7f0000000200), 0x2000000000000004, 0x4e)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
recvfrom$inet(r1, 0x0, 0xff8c, 0x0, 0x0, 0x800e0074d)
ppoll(&(0x7f00000001c0)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0)
shutdown(r1, 0x0)

[  237.118275][ T8900] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  237.127638][   T27] audit: type=1804 audit(1573971839.908:32): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir558942416/syzkaller.8yzxS0/0/file0/bus" dev="ramfs" ino=28101 res=1
[  237.212860][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.222388][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.231290][ T8903] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  237.267847][ T8903] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  237.308018][ T8903] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  237.374114][ T8893] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  237.385366][ T8893] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  237.413405][ T8898] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.423133][ T8895] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.437282][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.446933][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.456345][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.464897][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.473615][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  237.482001][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  237.490344][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  237.498721][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.534448][ T8893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  237.543280][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  237.552814][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.561346][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.568981][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.576874][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  237.585248][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  237.599187][ T8898] 8021q: adding VLAN 0 to HW filter on device team0
[  237.634702][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  237.643501][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  237.652163][ T8908] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.659302][ T8908] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.669799][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  237.678683][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  237.687283][ T8908] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.694396][ T8908] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.702235][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.712191][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  237.721021][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  237.729806][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  237.739463][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  237.747561][ T8908] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  237.761479][ T8895] 8021q: adding VLAN 0 to HW filter on device team0
[  237.805423][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  237.820287][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  237.836433][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.848695][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.858098][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  237.868141][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  237.880156][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.887304][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.895235][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  237.904407][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  237.913110][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.920305][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  237.928143][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  237.961129][ T8898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  237.972172][ T8898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.006662][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.015573][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  238.024456][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.034909][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
06:24:00 executing program 1:
r0 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffffffe, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
listen(r0, 0x0)

06:24:00 executing program 0:
syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @empty=[0x0, 0x0, 0x0, 0x6], [], {@ipv6={0x86dd, {0x0, 0x6, "08e643", 0x30, 0x0, 0x0, @dev, @empty, {[], @icmpv6=@param_prob={0x4, 0x1, 0x0, 0x0, {0x0, 0x6, "e9865c", 0x0, 0x0, 0x0, @remote, @local}}}}}}}, &(0x7f00000002c0)={0x0, 0x4, [0x0, 0xf87]})

[  238.053861][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  238.076436][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  238.085178][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.099289][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.109468][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  238.124677][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
06:24:01 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
io_setup(0x40, &(0x7f0000000480))

06:24:01 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)

[  238.254714][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  238.271473][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  238.299077][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  238.322660][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.334464][ T8939] BPF:hdr_len not found
[  238.341427][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  238.350480][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  238.359098][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.366642][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.383208][ T8895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  238.405281][ T8903] 8021q: adding VLAN 0 to HW filter on device bond0
[  238.417555][ T8898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.432248][ T8900] 8021q: adding VLAN 0 to HW filter on device bond0
06:24:01 executing program 0:
r0 = socket(0x10, 0x4008000000803, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x1c}}, 0x0)

[  238.454528][ T8903] 8021q: adding VLAN 0 to HW filter on device team0
[  238.477887][ T8895] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.509954][ T8909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.549074][ T8909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
06:24:01 executing program 1:
r0 = socket(0x10, 0x4008000000803, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc351a402f91d44c9}}, 0x1c}}, 0x0)

[  238.578187][ T8909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.588332][ T8909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.626710][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.642139][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.653109][ T2626] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.660298][ T2626] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.676002][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  238.684813][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  238.694466][ T2626] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.701601][ T2626] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.709448][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  238.717914][ T2626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
06:24:01 executing program 0:

[  238.739265][ T8900] 8021q: adding VLAN 0 to HW filter on device team0
[  238.753712][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  238.761950][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.830005][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  238.850358][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  238.897691][ T3044] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.904932][ T3044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  238.921477][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.930670][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.940376][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.961195][ T8959] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it!
[  238.993274][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  239.007652][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.018097][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  239.027537][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  239.036543][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.043673][ T3044] bridge0: port 2(bridge_slave_1) entered forwarding state
[  239.053466][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  239.064572][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.074093][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.083134][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.091707][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.100225][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  239.113081][ T8903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.128426][ T8903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
06:24:01 executing program 2:

06:24:01 executing program 3:

[  239.156593][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.165205][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.175112][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  239.218105][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  239.291582][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  239.299851][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  239.309439][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  239.321333][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  239.330405][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  239.342631][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.350246][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.372392][ T8900] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  239.390004][ T8900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  239.408909][ T8903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.422496][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  239.436748][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  239.472647][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.483702][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.504351][ T8900] 8021q: adding VLAN 0 to HW filter on device batadv0
[  239.739547][    C0] hrtimer: interrupt took 27223 ns
[  239.836232][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  239.842859][    C1] protocol 88fb is buggy, dev hsr_slave_1
[  239.948313][    C1] protocol 88fb is buggy, dev hsr_slave_0
[  239.954416][    C1] protocol 88fb is buggy, dev hsr_slave_1
06:24:02 executing program 4:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(r0, &(0x7f0000000000), 0xffffffffffffff66)
ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x1, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f00000004c0)='cpuset.effective_cpus\x00O\x95\xcb2^]\x9b\xb4M\xf8\x04x\xa1\xe6\x88\xe2\xad\xac\x81\x83\x8e1\x7f\xf9\x85\xec\xcc\xb8?\xf9T\n,\x9dCx\xd3-C6\xd8,\xffq\x05\xa8w\xffg\x9d\xfe\xba\xaa\xf3k\xeb\x93[\xc4\xd9\xb4CY\xdeW\x92!\xaan\x1e\x98\"\x86Hz5/\xf8(\xabWA\x84A\b\xcf\xa9\x81w\xc7\x84\xb2\xa0s\x1b\x907\x84\xaae', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x11, 0xa, 0x300)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r4, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000003000020000000ac0be1c3fd359c9c71cea87013a44180ae7bf8a8d8fb9fa5d732f76e009ba6d9132c033ecc3a9a1876c85f1a536fe44a482e6a1e3a3c4d798391dad5e1abd8df72da36627c1bd9d3778c3aa602e77c74c3ea464cf162efacc6f838523c68abfbe4d6c2d130cc95c307674699cf02162d21aca16da11621b265bbee6f093c34ed1e6943534e254d00000000bc99d51a5a5c967001ce0b3887ab6daee860e8acbf8a25da607f072162c218acc8c01f349945444895d8f0d3fb46d44c10f527922225e361c9858d19841db720cfe6f4789eec71"], 0x0, 0x1b}, 0x20)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000400))
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r6 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161)
sendmsg$kcm(r6, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1758e83a0006656dbfda9b8985481f0c885415cc28f146f040603834495ee08eb9aaab4223c61f71b5ac31d94a48406c0aa27995001e47bc54f945e9fab2ed08d03868908bd31a7b37e0300537c6a5a61c1e63b4451334f6fd85f3bf83501e505284f59f204d16cd96e952ef2ff6f00d5d004d"], 0xfdef)

06:24:02 executing program 1:

06:24:02 executing program 0:

06:24:02 executing program 3:

06:24:02 executing program 5:

06:24:02 executing program 2:

06:24:02 executing program 5:

06:24:02 executing program 1:

06:24:02 executing program 2:

06:24:02 executing program 3:

06:24:02 executing program 0:

06:24:03 executing program 3:

06:24:03 executing program 4:

06:24:03 executing program 5:

06:24:03 executing program 1:

06:24:03 executing program 2:

06:24:03 executing program 0:

06:24:03 executing program 3:

06:24:03 executing program 5:

06:24:03 executing program 1:

06:24:03 executing program 0:

06:24:03 executing program 2:

06:24:03 executing program 3:

06:24:03 executing program 4:

06:24:03 executing program 5:

06:24:03 executing program 1:

06:24:03 executing program 2:

06:24:03 executing program 3:

06:24:03 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x182)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1c69ab0d058b1b678397214eec9ff0d0cc8773ebb2cfd89b0252317a845d3df759d280ad530ff887d31ed8f9bf42b889fadb99a5defc79bd6b2023939c49224f", "e9af2deca424f1d69c3cef2acc10d15cae4da1bf9b1c974dd2de2185a2ae81bbcb58ebaa0b202596b0b84f59798e42bca13b7dd7218fcb5e75d1d7299ff17955", "804c0e6791e9da90dce632e1e4efa40c25402952a8dd77a5bf0805cfc3425350"})

06:24:03 executing program 4:
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, 0x0)
r0 = socket$inet(0x2, 0x4000000805, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = dup3(r0, r1, 0x0)
sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r1, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)

06:24:03 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff66)
ioctl$TUNSETFILTEREBPF(r0, 0x6609, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x1a0ffffffff)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuset.effective_cpus\x00O\x95\xcb2^]\x9b\xb4M\xf8\x04x\xa1\xe6\x88\xe2\xad\xac\x81\x83\x8e1\x7f\xf9\x85\xec\xcc\xb8?\xf9T\n,\x9dCx\xd3-C6\xd8,\xffq\x05\xa8w\xffg\x9d\xfe\xba\xaa\xf3k\xeb\x93[\xc4\xd9\xb4CY\xdeW\x92!\xaan\x1e\x98\"\x86Hz5/\xf8(\xabWA\x84A\b\xcf\xa9\x81w\xc7\x84\xb2\xa0s\x1b\x907\x84\xaae', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x11, 0xa, 0x300)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
socket$kcm(0x29, 0x5, 0x0)
socket$kcm(0x29, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.mems\x00', 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001980)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000003000020000000ac0be1c3fd359c9c71cea87013a44180ae7bf8a8d8fb9fa5d732f76e009ba6d9132c033ecc3a9a1876c85f1a536fe44a482e6a1e3a3c4d798391dad5e1abd8df72da36627c1bd9d3778c3aa602e77c74c3ea464cf1"], 0x0, 0x70}, 0x20)
socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5452, &(0x7f0000000400))
socket$kcm(0x10, 0x800000000002, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
sendmsg$kcm(r4, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00)
write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1758e83a0006656dbfda9b8985481f0c885415cc28f146f040603834495ee08eb9aaab4223c61f71b5ac31d94a48406c0aa27995001e47bc54f945e9fab2ed08d03868908bd31a7b37e0300537c6a5a61c1e63b4451334f6fd85f3bf83501e505284f59f204d16cd96e952ef2ff6f00d5d004d"], 0xfdef)

06:24:03 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x1, 0x4)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
sendmmsg(r0, &(0x7f0000009240)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{0x0}, {&(0x7f0000000b80)="fb", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000004f40)=[{&(0x7f0000004ec0)="11", 0x1}], 0x1}}], 0x2, 0x0)

06:24:03 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780)='/dev/net/tun\x00', 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240))
socket$kcm(0xa, 0x0, 0x11)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x1132})
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7f)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@nl, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)}, {&(0x7f00000003c0)}, {&(0x7f00000007c0)}, {&(0x7f00000017c0)}, {&(0x7f0000000480)="4ad5342a83f8d8c683469bf7fa00b406531bb2377cd80e94b059feb0469141f32ffae522bb8e6c7e960611a21547151cf67e235d4da0be75e09b7c8cd1b7a4c5fb64d7e6e96c067b4fca2a1ef65158aba6e39a1b011fb0439b0abbe8b28eed77500a818367c91a2f1ae9de0efb9ece4045416a9ec6e223bb672a55fbdbb555598cb4d8d59b7c6764da8de2b45f4a33c94775a4696d3cd576a9f17a97069781ad75c9f8430fdad6d2ed74250d7bb51e957628a736", 0xb4}, {&(0x7f0000000540)}, {0x0}, {&(0x7f0000000600)="ad4166dfd62228409787f13e64b007ca86956ce161d6ed27a0466b7e1e6a11753fdb357ca5e9d334c97279c5253ab6666e971b51940a7828d909f94dd278989555efa444afec177e0f30cd75d2178aa0ae688f902512f1efa615d729d6fff66025cce3bbbd20bcbd5e3b1ffb8e963b6384fa844981fe1509d75a518e", 0x7c}], 0x8}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x6, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x7132})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0xb1}, {0x6}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)

06:24:03 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = dup(r0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='lp\x00', 0x3)

06:24:03 executing program 5:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x0, 0x0)

06:24:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket(0x2, 0x3, 0x100000001)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_elf32(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="eef0"], 0x2)

06:24:04 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x48, &(0x7f0000000080)=0x5, 0x4)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr="61798000"}, 0x1c)

06:24:04 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48)
listen(r0, 0x0)

[  241.626142][    C0] protocol 88fb is buggy, dev hsr_slave_0
[  241.632119][    C0] protocol 88fb is buggy, dev hsr_slave_1
06:24:04 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x0, 0x0)
poll(&(0x7f0000000140)=[{r2}], 0x1, 0x8)

06:24:04 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200))
close(0xffffffffffffffff)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="01000600aaaaaaaaaabb26de256f6b1833fdf1c2ff0000000000000000"])
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d)
ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0)
socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3)

06:24:04 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x2, &(0x7f0000000100)={@local, @local}, 0x3)

06:24:04 executing program 2:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1e)
unlink(&(0x7f00000000c0)='./file0\x00')
clone(0x100010b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x802080, 0x0)
ptrace$setopts(0x4206, 0x0, 0x0, 0x0)
ftruncate(r0, 0x0)

06:24:04 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x223e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00')
process_vm_writev(0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/21, 0x15}], 0x10000000000000ca, 0x0, 0x0, 0x0)
writev(r4, &(0x7f0000000080), 0x5b)

06:24:04 executing program 5:
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024)
perf_event_open(&(0x7f000025c000)={0x400000001, 0xfffffffffffffe66, 0x2005, 0x0, 0x0, 0xfc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffbffffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x2007fff)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r3, r4, 0x0, 0x800000000024)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x2, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0x142f, 0x7d}, 0xc)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

[  242.220186][   T27] audit: type=1804 audit(1573971844.998:33): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/8/bus" dev="sda1" ino=16538 res=1
[  242.342583][   T27] audit: type=1804 audit(1573971845.108:34): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/8/bus" dev="sda1" ino=16538 res=1
[  242.459265][   T27] audit: type=1804 audit(1573971845.168:35): pid=9137 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/8/bus" dev="sda1" ino=16538 res=1
06:24:05 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024)
perf_event_open(&(0x7f000025c000)={0x400000001, 0xfffffffffffffe66, 0x2005, 0x0, 0x0, 0xfc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffbffffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x2007fff)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r3, r4, 0x0, 0x800000000024)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x2, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0x142f, 0x7d}, 0xc)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

06:24:05 executing program 5:
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024)
perf_event_open(&(0x7f000025c000)={0x400000001, 0xfffffffffffffe66, 0x2005, 0x0, 0x0, 0xfc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffbffffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x2007fff)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r3, r4, 0x0, 0x800000000024)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x2, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0x142f, 0x7d}, 0xc)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

06:24:05 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
write$tun(r2, &(0x7f00000002c0)={@void, @val={0x0, 0x0, 0x2}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0xf98, 0x2f, 0x0, @rand_addr="d56cf284e18538d3b51df0dae27685f0", @mcast2, {[@routing={0x2f}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "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"}, {}, {}, {0x8, 0x6558, 0x0, "cf7b6b0bbf40037c3a003bd16fbe433c9dd42f8efd13c90816e12cf0b204b7cb5ad7afcc7efba6d64f42903ac4e970ae576d3e9c1e2b8ca9"}}}}}}, 0xfca)

[  242.545916][   T27] audit: type=1804 audit(1573971845.178:36): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/8/bus" dev="sda1" ino=16538 res=1
06:24:05 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200))
close(0xffffffffffffffff)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="01000600aaaaaaaaaabb26de256f6b1833fdf1c2ff0000000000000000"])
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280), 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d)
ioctl$TUNSETFILTEREBPF(r2, 0x6609, 0x0)
socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x3)

[  242.703765][   T27] audit: type=1804 audit(1573971845.178:37): pid=9133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/8/bus" dev="sda1" ino=16538 res=1
[  242.708101][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:24:05 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024)
perf_event_open(&(0x7f000025c000)={0x400000001, 0xfffffffffffffe66, 0x2005, 0x0, 0x0, 0xfc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffbffffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x2007fff)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r3, r4, 0x0, 0x800000000024)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x2, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0x142f, 0x7d}, 0xc)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

[  242.844712][   T27] audit: type=1804 audit(1573971845.528:38): pid=9153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir589058041/syzkaller.RpS76g/10/bus" dev="sda1" ino=16551 res=1
[  242.882881][ T9145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
06:24:05 executing program 5:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, 0x0, 0x659d2369f0013242)
recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x0)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x102, 0x4, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x0, 0x800000000000000, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
dup(0xffffffffffffffff)
socket$inet6(0xa, 0x80002, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00')
r3 = socket(0x10, 0x800000000000803, 0x0)
sendto(r3, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4)
recvmmsg(r3, &(0x7f0000004e00), 0x27b, 0x0, 0x0)
ioctl$VIDIOC_S_FBUF(r2, 0x4030560b, &(0x7f0000000180)={0x10, 0x30, &(0x7f0000000100), {0xfffffffe, 0x7, 0x31384142, 0x2, 0x200, 0x1ff, 0x7, 0xbca}})

[  243.013204][   T27] audit: type=1804 audit(1573971845.578:39): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/9/bus" dev="sda1" ino=16542 res=1
[  243.038736][ T9145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  243.206027][   T27] audit: type=1804 audit(1573971845.608:40): pid=9148 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir589058041/syzkaller.RpS76g/10/bus" dev="sda1" ino=16551 res=1
06:24:06 executing program 1:
r0 = socket$inet6(0xa, 0x0, 0x0)
close(r0)
r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x2007fff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000000024)
perf_event_open(&(0x7f000025c000)={0x400000001, 0xfffffffffffffe66, 0x2005, 0x0, 0x0, 0xfc, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffbffffd}, 0x0, 0xffffffffffffffff, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
r2 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0)
ftruncate(r2, 0x2007fff)
vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffff7fffffb}, 0x0)
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x3}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r3)
r4 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
sendfile(r3, r4, 0x0, 0x800000000024)
setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f00000000c0)={0x2, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x0, 'lblcr\x00', 0x0, 0x142f, 0x7d}, 0xc)
creat(&(0x7f00000003c0)='./file0\x00', 0x0)
creat(&(0x7f00000002c0)='./bus\x00', 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)

[  243.347188][   T27] audit: type=1804 audit(1573971845.618:41): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/9/bus" dev="sda1" ino=16542 res=1
06:24:06 executing program 2:

06:24:06 executing program 3:

06:24:06 executing program 2:

[  243.584878][   T27] audit: type=1804 audit(1573971845.778:42): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir712893246/syzkaller.TmJUEo/9/bus" dev="sda1" ino=16542 res=1
[  299.311457][ T9210] apt-config (9210) used greatest stack depth: 22888 bytes left
[  400.105946][ T1078] INFO: task :9132 can't die for more than 143 seconds.
[  400.113117][ T1078]                 R  running task    29432  9132   8890 0x00004006
[  400.132830][ T1078] Call Trace:
[  400.137780][ T1078]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  400.143253][ T1078]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  400.153975][ T1078]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  400.159763][ T1078]  ? retint_kernel+0x2b/0x2b
[  400.164350][ T1078]  ? trace_hardirqs_on_caller+0x6a/0x240
[  400.174462][ T1078]  ? lockdep_hardirqs_on+0x421/0x5e0
[  400.181848][ T1078]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  400.191849][ T1078]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  400.197651][ T1078]  ? __this_cpu_preempt_check+0x35/0x190
[  400.205016][ T1078]  ? retint_kernel+0x2b/0x2b
[  400.214182][ T1078]  ? irq_work_sync+0xd1/0x1d0
[  400.219740][ T1078]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  400.230478][ T1078]  ? irq_work_sync+0x106/0x1d0
[  400.235239][ T1078]  ? _free_event+0x89/0x13b0
[  400.240095][ T1078]  ? __kasan_check_write+0x14/0x20
[  400.245280][ T1078]  ? __mutex_unlock_slowpath+0xf0/0x6a0
[  400.255406][ T1078]  ? mark_held_locks+0xa4/0xf0
[  400.261031][ T1078]  ? ring_buffer_attach+0x650/0x650
[  400.271449][ T1078]  ? wait_for_completion+0x440/0x440
[  400.276989][ T1078]  ? put_event+0x47/0x60
[  400.281224][ T1078]  ? perf_event_release_kernel+0x6d5/0xd70
[  400.293282][ T1078]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  400.299787][ T1078]  ? __perf_event_exit_context+0x170/0x170
[  400.305588][ T1078]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  400.316711][ T1078]  ? perf_release+0x37/0x50
[  400.321238][ T1078]  ? __fput+0x2ff/0x890
[  400.325381][ T1078]  ? perf_event_release_kernel+0xd70/0xd70
[  400.334252][ T1078]  ? ____fput+0x16/0x20
[  400.340171][ T1078]  ? task_work_run+0x145/0x1c0
[  400.344945][ T1078]  ? exit_to_usermode_loop+0x316/0x380
[  400.357824][ T1078]  ? do_syscall_64+0x676/0x790
[  400.362613][ T1078]  ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  400.371910][ T1078] 
[  400.371910][ T1078] Showing all locks held in the system:
[  400.381474][ T1078] 1 lock held by khungtaskd/1078:
[  400.389758][ T1078]  #0: ffffffff88faccc0 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279
[  400.402892][ T1078] 1 lock held by rsyslogd/8763:
[  400.411440][ T1078]  #0: ffff8880a2e078e0 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110
[  400.421855][ T1078] 2 locks held by getty/8853:
[  400.429830][ T1078]  #0: ffff88809fea4090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.440570][ T1078]  #1: ffffc90005f152e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.453362][ T1078] 2 locks held by getty/8854:
[  400.459673][ T1078]  #0: ffff888097aa6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.471655][ T1078]  #1: ffffc90005f392e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.482917][ T1078] 2 locks held by getty/8855:
[  400.491631][ T1078]  #0: ffff88809bf32090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.502252][ T1078]  #1: ffffc90005f352e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.518904][ T1078] 2 locks held by getty/8856:
[  400.523584][ T1078]  #0: ffff888091402090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.537176][ T1078]  #1: ffffc90005f2d2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.549818][ T1078] 2 locks held by getty/8857:
[  400.554484][ T1078]  #0: ffff88809bcb6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.565207][ T1078]  #1: ffffc90005f292e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.579506][ T1078] 2 locks held by getty/8858:
[  400.584187][ T1078]  #0: ffff8880a48d8090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.594329][ T1078]  #1: ffffc90005f252e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.608683][ T1078] 2 locks held by getty/8859:
[  400.613378][ T1078]  #0: ffff88809b388090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40
[  400.624952][ T1078]  #1: ffffc90005f012e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0
[  400.640973][ T1078] 
[  400.643309][ T1078] =============================================
[  400.643309][ T1078] 
[  400.653315][ T1078] NMI backtrace for cpu 0
[  400.657753][ T1078] CPU: 0 PID: 1078 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0
[  400.666407][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  400.676447][ T1078] Call Trace:
[  400.679803][ T1078]  dump_stack+0x197/0x210
[  400.684142][ T1078]  nmi_cpu_backtrace.cold+0x70/0xb2
[  400.689336][ T1078]  ? vprintk_func+0x86/0x189
[  400.694355][ T1078]  ? lapic_can_unplug_cpu.cold+0x3a/0x3a
[  400.699981][ T1078]  nmi_trigger_cpumask_backtrace+0x23b/0x28b
[  400.705947][ T1078]  arch_trigger_cpumask_backtrace+0x14/0x20
[  400.711820][ T1078]  watchdog+0xc8f/0x1350
[  400.716056][ T1078]  kthread+0x361/0x430
[  400.720109][ T1078]  ? reset_hung_task_detector+0x30/0x30
[  400.725643][ T1078]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[  400.731362][ T1078]  ret_from_fork+0x24/0x30
[  400.736024][ T1078] Sending NMI from CPU 0 to CPUs 1:
[  400.741600][    C1] NMI backtrace for cpu 1
[  400.741606][    C1] CPU: 1 PID: 9132 Comm:  Not tainted 5.4.0-rc7-next-20191115 #0
[  400.741612][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  400.741615][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x50
[  400.741625][    C1] Code: ff cc cc cc cc cc cc cc cc cc 65 48 8b 04 25 c0 1e 02 00 48 8b 80 18 13 00 00 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 <55> 48 89 e5 65 48 8b 04 25 c0 1e 02 00 65 8b 15 34 45 8e 7e 81 e2
[  400.741629][    C1] RSP: 0018:ffff888057d4fc00 EFLAGS: 00000246
[  400.741636][    C1] RAX: 0000000000040000 RBX: 0000000000000002 RCX: ffffc90006357000
[  400.741641][    C1] RDX: 0000000000040000 RSI: ffffffff817e51c1 RDI: 0000000000000005
[  400.741645][    C1] RBP: ffff888057d4fc28 R08: ffff88809c506140 R09: ffffed10142bae82
[  400.741649][    C1] R10: ffffed10142bae81 R11: ffff8880a15d740b R12: ffff8880a15d7408
[  400.741654][    C1] R13: 0000000000000003 R14: ffffed10142bae81 R15: ffff888057d4fcc8
[  400.741659][    C1] FS:  00007f0c0da0a700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000
[  400.741662][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  400.741667][    C1] CR2: 00007f6a24ffc140 CR3: 00000000a1baa000 CR4: 00000000001406e0
[  400.741671][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  400.741676][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  400.741678][    C1] Call Trace:
[  400.741681][    C1]  ? irq_work_sync+0xd8/0x1d0
[  400.741684][    C1]  _free_event+0x89/0x13b0
[  400.741688][    C1]  ? __kasan_check_write+0x14/0x20
[  400.741691][    C1]  ? __mutex_unlock_slowpath+0xf0/0x6a0
[  400.741694][    C1]  ? mark_held_locks+0xa4/0xf0
[  400.741697][    C1]  ? ring_buffer_attach+0x650/0x650
[  400.741701][    C1]  ? wait_for_completion+0x440/0x440
[  400.741703][    C1]  put_event+0x47/0x60
[  400.741707][    C1]  perf_event_release_kernel+0x6d5/0xd70
[  400.741711][    C1]  ? __sanitizer_cov_trace_const_cmp8+0x18/0x20
[  400.741714][    C1]  ? __perf_event_exit_context+0x170/0x170
[  400.741718][    C1]  ? __sanitizer_cov_trace_const_cmp2+0x18/0x20
[  400.741721][    C1]  perf_release+0x37/0x50
[  400.741724][    C1]  __fput+0x2ff/0x890
[  400.741727][    C1]  ? perf_event_release_kernel+0xd70/0xd70
[  400.741730][    C1]  ____fput+0x16/0x20
[  400.741734][    C1]  task_work_run+0x145/0x1c0
[  400.741737][    C1]  exit_to_usermode_loop+0x316/0x380
[  400.741740][    C1]  do_syscall_64+0x676/0x790
[  400.741744][    C1]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  400.741746][    C1] RIP: 0033:0x45a639
[  400.741756][    C1] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  400.741759][    C1] RSP: 002b:00007f0c0da09c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  400.741768][    C1] RAX: 0000000020000000 RBX: 0000000000000006 RCX: 000000000045a639
[  400.741772][    C1] RDX: 0000000000010006 RSI: 0000000000003000 RDI: 0000000020000000
[  400.741777][    C1] RBP: 000000000075c070 R08: 0000000000000006 R09: 0000000000000000
[  400.741781][    C1] R10: 0000000000080011 R11: 0000000000000246 R12: 00007f0c0da0a6d4
[  400.741785][    C1] R13: 00000000004c705c R14: 00000000004dc7f8 R15: 00000000ffffffff
[  400.750830][ T1078] Kernel panic - not syncing: hung_task: blocked tasks
[  401.057396][ T1078] CPU: 0 PID: 1078 Comm: khungtaskd Not tainted 5.4.0-rc7-next-20191115 #0
[  401.066248][ T1078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  401.076294][ T1078] Call Trace:
[  401.079591][ T1078]  dump_stack+0x197/0x210
[  401.083918][ T1078]  panic+0x2e3/0x75c
[  401.087799][ T1078]  ? add_taint.cold+0x16/0x16
[  401.092458][ T1078]  ? lapic_can_unplug_cpu.cold+0x3a/0x3a
[  401.098087][ T1078]  ? ___preempt_schedule+0x16/0x18
[  401.103192][ T1078]  ? nmi_trigger_cpumask_backtrace+0x21b/0x28b
[  401.109329][ T1078]  ? nmi_trigger_cpumask_backtrace+0x24c/0x28b
[  401.115479][ T1078]  ? nmi_trigger_cpumask_backtrace+0x256/0x28b
[  401.121621][ T1078]  ? nmi_trigger_cpumask_backtrace+0x21b/0x28b
[  401.127775][ T1078]  watchdog+0xca0/0x1350
[  401.132009][ T1078]  kthread+0x361/0x430
[  401.136068][ T1078]  ? reset_hung_task_detector+0x30/0x30
[  401.141613][ T1078]  ? kthread_mod_delayed_work+0x1f0/0x1f0
[  401.147335][ T1078]  ret_from_fork+0x24/0x30
[  401.153301][ T1078] Kernel Offset: disabled
[  401.157638][ T1078] Rebooting in 86400 seconds..