[....] Starting OpenBSD Secure Shell server: sshd[   40.053081] audit: type=1800 audit(1555301017.720:33): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[?25l[?1c7[ ok 8[?25h[?0c.
[   40.082442] audit: type=1800 audit(1555301017.720:34): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   57.259717] random: sshd: uninitialized urandom read (32 bytes read)
[   57.546340] audit: type=1400 audit(1555301035.210:35): avc:  denied  { map } for  pid=7190 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   57.599462] random: sshd: uninitialized urandom read (32 bytes read)
[   58.333721] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.10.37' (ECDSA) to the list of known hosts.
[   63.963863] random: sshd: uninitialized urandom read (32 bytes read)
2019/04/15 04:04:01 fuzzer started
[   64.167972] audit: type=1400 audit(1555301041.830:36): avc:  denied  { map } for  pid=7200 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   66.121871] random: cc1: uninitialized urandom read (8 bytes read)
2019/04/15 04:04:04 dialing manager at 10.128.0.105:33413
2019/04/15 04:04:04 syscalls: 2434
2019/04/15 04:04:04 code coverage: enabled
2019/04/15 04:04:04 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/04/15 04:04:04 extra coverage: extra coverage is not supported by the kernel
2019/04/15 04:04:04 setuid sandbox: enabled
2019/04/15 04:04:04 namespace sandbox: enabled
2019/04/15 04:04:04 Android sandbox: /sys/fs/selinux/policy does not exist
2019/04/15 04:04:04 fault injection: enabled
2019/04/15 04:04:04 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/04/15 04:04:04 net packet injection: enabled
2019/04/15 04:04:04 net device setup: enabled
[   68.711231] random: crng init done
04:05:45 executing program 5:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000340)='./file0\x00', 0x3)
write$binfmt_script(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="23212d2e2f66696c65302d3fae03935aff90b7995c3d2ff9f9e899c6d9a32cc592f0fd2f14bf9581dfa3be8d16066dff0700000000000074a910cb3c3289f91c04e66e172ceaa8beeea3b98c01bdcdd4b0d5074ca5dd9cb69ef21be6363fb312cdd6d735ae3d68b2476f6fe88f0fdd1dc548b3c228240a9f488ac556bb15cec6dbb7eb27fe3ca84eeb54961e7e687b54e87549e9c3da6c65edd8716f97375b11c248b8a83d0d4813bd546205afd0f3e2"], 0xb0)
close(r1)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000100)={0x3ff, 0x6})
clone(0x10002102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$TIOCGPGRP(r1, 0x540f, 0x0)
r2 = getpgrp(0x0)
getpgid(0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
fcntl$getown(r0, 0x9)
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f0000000800)={0xa, 0x4e24, 0x1, @ipv4={[], [], @local}}, 0x1c)
ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r2)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000180)={0x9, 0x9, 0x4, 0x0, 0x1, 0x8})
sendmmsg(r3, &(0x7f000000ac80), 0x400000000000302, 0x4008800)
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0)

04:05:45 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620c, &(0x7f0000000180))

04:05:45 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x4000000000005de, 0x0, &(0x7f0000000100)={0x77359400})

04:05:45 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='em1ppr0ScpusftsysL\xc5\xf9z')

[  168.130768] audit: type=1400 audit(1555301145.790:37): avc:  denied  { map } for  pid=7200 comm="syz-fuzzer" path="/root/syzkaller-shm847595655" dev="sda1" ino=16488 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
04:05:45 executing program 4:
ioctl(0xffffffffffffffff, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='a-\x9c~4\x01ttr\x00')
getdents64(0xffffffffffffffff, 0x0, 0x0)
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0)
r0 = accept4$inet(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000001540)=[{}, {r0}], 0x2, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffe}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./bus\x00', 0x124)
setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000200)={{0x6e, @remote, 0x4e23, 0x3, 'none\x00', 0x4, 0x6, 0x32}, {@dev, 0x0, 0x3, 0x0, 0x20002000000, 0x90}}, 0x44)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndseq(&(0x7f0000000280)='/dev/snd/seq\x00', 0x0, 0x0)
read(r2, &(0x7f0000000500)=""/4096, 0x1000)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x8000000, 0x1000})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0xfffffffffffffffe})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{0x0, 0x1}, {0x80}})

04:05:45 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c)

[  168.177235] audit: type=1400 audit(1555301145.830:38): avc:  denied  { map } for  pid=7216 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=1107 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  168.483476] IPVS: ftp: loaded support on port[0] = 21
[  168.742381] IPVS: ftp: loaded support on port[0] = 21
[  168.755243] chnl_net:caif_netlink_parms(): no params data found
[  168.827078] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.833905] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.841907] device bridge_slave_0 entered promiscuous mode
[  168.849631] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.856180] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.863306] device bridge_slave_1 entered promiscuous mode
[  168.883399] IPVS: ftp: loaded support on port[0] = 21
[  168.893090] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  168.902662] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  168.945764] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  168.953153] team0: Port device team_slave_0 added
[  168.962024] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  168.969366] team0: Port device team_slave_1 added
[  168.993587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  169.004134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  169.013342] chnl_net:caif_netlink_parms(): no params data found
[  169.082378] device hsr_slave_0 entered promiscuous mode
[  169.120422] device hsr_slave_1 entered promiscuous mode
[  169.194294] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  169.204719] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  169.255657] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.262189] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.269548] device bridge_slave_0 entered promiscuous mode
[  169.279865] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.286526] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.293690] device bridge_slave_1 entered promiscuous mode
[  169.300722] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.307649] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.314763] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.321179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.329486] IPVS: ftp: loaded support on port[0] = 21
[  169.364754] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  169.377542] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  169.418582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  169.427054] team0: Port device team_slave_0 added
[  169.433132] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  169.440663] team0: Port device team_slave_1 added
[  169.465616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  169.474290] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  169.532969] device hsr_slave_0 entered promiscuous mode
[  169.570491] device hsr_slave_1 entered promiscuous mode
[  169.654056] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  169.664723] chnl_net:caif_netlink_parms(): no params data found
[  169.683079] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  169.759492] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.766561] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.774097] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.781452] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.791337] IPVS: ftp: loaded support on port[0] = 21
[  169.802075] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  169.808777] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.816038] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.823845] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.836235] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  169.846583] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.854102] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.863590] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.870851] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.878882] device bridge_slave_0 entered promiscuous mode
[  169.908841] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.916267] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.923514] device bridge_slave_1 entered promiscuous mode
[  169.947315] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  169.964259] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  169.974117] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  169.989777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.997926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.009686] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  170.018089] 8021q: adding VLAN 0 to HW filter on device team0
[  170.063888] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  170.103942] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  170.113904] chnl_net:caif_netlink_parms(): no params data found
[  170.145114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.155150] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.164976] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.171523] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.186934] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  170.195150] team0: Port device team_slave_0 added
[  170.210692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  170.219055] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  170.227718] team0: Port device team_slave_1 added
[  170.238084] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  170.250441] IPVS: ftp: loaded support on port[0] = 21
[  170.260805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.270637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.279914] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.287177] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.303861] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  170.317847] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.350482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  170.362844] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  170.388330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.414317] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.421669] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.432634] device bridge_slave_0 entered promiscuous mode
[  170.444271] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.451936] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.460723] device bridge_slave_1 entered promiscuous mode
[  170.485829] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  170.552845] device hsr_slave_0 entered promiscuous mode
[  170.610557] device hsr_slave_1 entered promiscuous mode
[  170.651010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  170.685431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  170.697915] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  170.709435] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  170.719378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.727966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.736510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.747904] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  170.755789] 8021q: adding VLAN 0 to HW filter on device team0
[  170.765325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  170.814574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  170.830880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  170.849633] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  170.857986] team0: Port device team_slave_0 added
[  170.868588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.877956] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.886513] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.893563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.901672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  170.910439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.920129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.930492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  170.938992] chnl_net:caif_netlink_parms(): no params data found
[  170.953065] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  170.961937] team0: Port device team_slave_1 added
[  170.967975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  170.978292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.988557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.998684] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.006754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.021173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  171.030719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  171.058080] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  171.081098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.092788] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.101326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  171.113145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  171.123238] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  171.193071] device hsr_slave_0 entered promiscuous mode
[  171.231368] device hsr_slave_1 entered promiscuous mode
[  171.271185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  171.279979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.288865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.299643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  171.310299] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  171.335550] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  171.343935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  171.352723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.363996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  171.376029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  171.398104] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  171.404857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  171.419149] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  171.428995] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.438273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.446762] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.453843] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.462488] device bridge_slave_0 entered promiscuous mode
[  171.469310] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.476264] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.484177] device bridge_slave_1 entered promiscuous mode
[  171.507199] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  171.530880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.539080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.556360] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  171.568276] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  171.577302] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  171.593232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  171.614377] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  171.623961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.633171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  171.709302] chnl_net:caif_netlink_parms(): no params data found
[  171.724649] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  171.738496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.765484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  171.774475] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  171.784713] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  171.791725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  171.804344] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  171.812118] team0: Port device team_slave_0 added
[  171.834474] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  171.862494] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.869069] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  171.877793] team0: Port device team_slave_1 added
[  171.884007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  171.893318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  171.994783] device hsr_slave_0 entered promiscuous mode
[  172.040645] device hsr_slave_1 entered promiscuous mode
[  172.091314] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  172.099796] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.129145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  172.142520] 8021q: adding VLAN 0 to HW filter on device bond0
[  172.156567] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  172.165298] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.172667] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.181847] device bridge_slave_0 entered promiscuous mode
[  172.193622] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  172.205057] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  172.220996] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.228916] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.245853] device bridge_slave_1 entered promiscuous mode
[  172.267024] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.276736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.289037] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
04:05:50 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000140)={0x3, 0x0, [{0x5, 0x2, 0x0, 0x0, @irqchip={0x4, 0x1}}, {0x7, 0x2, 0x0, 0x0, @sint={0xb8daf478000, 0x5}}, {0x8, 0x0, 0x0, 0x0, @adapter}]})

[  172.299028] audit: type=1400 audit(1555301149.960:39): avc:  denied  { set_context_mgr } for  pid=7253 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
[  172.318730] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  172.332659] binder: 7253:7257 ioctl c018620c 20000180 returned -22
[  172.336173] 8021q: adding VLAN 0 to HW filter on device team0
[  172.382490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  172.395139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  172.398987] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details.
[  172.426256] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
04:05:50 executing program 0:
mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x22002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpeername(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x3a3)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000040))
writev(0xffffffffffffffff, &(0x7f00000004c0), 0x0)
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)
write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0)
mkdir(&(0x7f00000005c0)='./file0\x00', 0x0)
ioctl$sock_ifreq(r1, 0x89ff, &(0x7f00000003c0)={'veth0\x00', @ifru_data=&(0x7f0000000140)="70cd8a622430e3fdf2ee143a8953a7f34f824e115145a304569eb4b5b20a20a0"})
syz_mount_image$btrfs(0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0)
syz_mount_image$ntfs(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x48000000, &(0x7f0000000600)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e2f66696c65312c776f726b6469723d2e2f66696c653100d5d9abea03ef71344b294bf38ae6866b8c250d68fde6dcf0823e239818ffffffffc7d97e09edef61c00855c0eee11e25fb3bf47699c3272b0ee1f2cc9407946fbae5609ef4371d2dea8c166a24e02d2f6ff919"])
creat(&(0x7f0000000080)='./file1/file0\x00', 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xa00, 0x80)
ioctl$sock_SIOCGIFBR(r1, 0x8940, 0x0)

[  172.459523] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  172.473439] 8021q: adding VLAN 0 to HW filter on device team0
[  172.485287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  172.501552] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  172.514964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.524981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.534788] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.541857] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.549439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.568773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  172.592978] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  172.602332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  172.617516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  172.630602] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.637535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.638885] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  172.659120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  172.670089] hrtimer: interrupt took 74745 ns
[  172.671226] overlayfs: failed to resolve './file1': -2
[  172.681064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  172.734517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.749857] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.773335] bridge0: port 2(bridge_slave_1) entered blocking state
04:05:50 executing program 5:
mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  172.780286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.803007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  172.813880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  172.831453] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.838082] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.852770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  172.871838] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
04:05:50 executing program 0:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246)

04:05:50 executing program 5:
pipe2$9p(0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000240))
fsetxattr$security_selinux(r0, &(0x7f0000000300)='security.selinux\x00', 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
socket$inet6(0xa, 0x1, 0x0)
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4000000004, 0x265)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[  172.884667] overlayfs: failed to resolve './file1': -2
[  172.886004] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  172.905913] team0: Port device team_slave_0 added
[  172.914342] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  172.922989] team0: Port device team_slave_1 added
[  172.933808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.955513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  172.977866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  172.996193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  173.021547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  173.039069] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  173.063733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.074439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  173.089961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  173.120721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  173.136845] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  173.187730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.202365] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.213359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  173.226226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  173.235449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.248241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.265337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  173.287201] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.298682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  173.364463] device hsr_slave_0 entered promiscuous mode
[  173.400486] device hsr_slave_1 entered promiscuous mode
[  173.441246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  173.449182] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  173.462245] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.469354] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  173.491953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  173.500596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  173.509174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.517987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.529377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
04:05:51 executing program 5:
pipe2$9p(0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f0000000240))
fsetxattr$security_selinux(r0, &(0x7f0000000300)='security.selinux\x00', 0x0, 0x0, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
socket$inet6(0xa, 0x1, 0x0)
openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000140)=0x4000000004, 0x265)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[  173.539552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  173.549660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  173.576319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  173.584860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  173.601746] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.616205] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.636086] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  173.646587] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  173.660962] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  173.667038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.693831] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  173.701820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.715248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.723569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  173.735881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  173.745867] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  173.758048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  173.768053] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  173.780829] 8021q: adding VLAN 0 to HW filter on device team0
04:05:51 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)
setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc)
getrusage(0x0, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1)
unshare(0x40000000)

[  173.855551] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  173.876262] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  173.894916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  173.923015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  173.941896] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  173.949924] bridge0: port 1(bridge_slave_0) entered blocking state
[  173.956635] bridge0: port 1(bridge_slave_0) entered forwarding state
[  173.988712] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.001245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  174.042991] IPVS: ftp: loaded support on port[0] = 21
[  174.065044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.095436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.124247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.148720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.164201] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.171376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.191790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  174.215015] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  174.273561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  174.287297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  174.327023] 8021q: adding VLAN 0 to HW filter on device bond0
[  174.391966] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  174.400356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  174.409582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  174.436017] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  174.492204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  174.505554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  174.513708] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  174.528441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
04:05:52 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000500)="0adc1f123c123f319bd070")
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x580, 0x30)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000140)=0x8, 0x3d8)
recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2002)

[  174.544238] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  174.599372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  174.623120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  174.636068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  174.646106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  174.659120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  174.682854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  174.696935] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  174.703538] 8021q: adding VLAN 0 to HW filter on device team0
[  174.719796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  174.729774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  174.741320] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  174.748344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  174.785184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
04:05:52 executing program 3:
r0 = socket$inet(0x10, 0x1000000000003, 0x0)
sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="4c0000001100fff1fefefd956f76c9b724a6008000000000000000683540150024001b000d000000b598bc593ab682115ed9443d51d7e88dc62b2ca654a6613b6a080000001cbc882b079881", 0x4c}], 0x1}, 0x0)

[  174.839134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  174.853829] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  174.864066] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.871309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.879888] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  174.904994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  174.928575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  174.954290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  174.963855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  174.974288] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.982517] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.995127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
04:05:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)
setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc)
getrusage(0x0, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1)
unshare(0x40000000)

[  175.008760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  175.027646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  175.056950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  175.090492] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  175.101220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  175.113111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  175.129602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  175.143120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  175.154302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  175.165036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  175.177123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  175.195768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  175.221330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  175.230769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  175.241316] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  175.261980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  175.274217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  175.283360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  175.297466] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  175.304555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  175.329209] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  175.375438] 8021q: adding VLAN 0 to HW filter on device batadv0
04:05:54 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c)

04:05:54 executing program 5:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r0, &(0x7f0000000080)={{0x3, @default, 0x3}, [@remote, @remote, @rose, @remote, @bcast, @null, @bcast, @bcast]}, 0x48)

04:05:54 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)
setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc)
getrusage(0x0, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1)
unshare(0x40000000)

04:05:54 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c)

04:05:54 executing program 3:
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
connect$ax25(r0, &(0x7f0000000080)={{0x3, @default}, [@remote, @remote, @rose, @remote, @bcast, @null, @bcast, @bcast]}, 0x48)

04:05:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = shmget(0x1, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil)
shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000280)=""/28)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000002c0)=0xfe1e)
r1 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x8000, 0x54)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2d, 0x0, 0x147)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200))
write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x8, {0x1}}, 0x18)
write$P9_RSETATTR(r1, &(0x7f0000000040)={0x7, 0x1b, 0x2}, 0x7)
setsockopt(r1, 0xab7, 0x1, &(0x7f0000000080)="93b9edc1fccc8fcfe63b2aea34ca8002c59a5e433b988cfaca43550e8a4055e56c88f5341ae972c873d19732bd63981e3f6f247d0305", 0x36)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x13)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRES16], @ANYRES32], 0xc)
getrusage(0x0, 0x0)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000180)=0xfc, &(0x7f00000001c0)=0x1)
unshare(0x40000000)

[  176.384325] ax25_connect(): syz-executor.5 uses autobind, please contact jreuter@yaina.de
[  176.404140] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de
04:05:54 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x10000000d}]}, 0x28}}, 0x0)

04:05:54 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c)

04:05:54 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./file0\x00')

04:05:54 executing program 4:
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r1)
setxattr$security_selinux(&(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x3)
open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)

[  176.524738] audit: type=1400 audit(1555301154.190:40): avc:  denied  { create } for  pid=7379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
04:05:54 executing program 5:

04:05:54 executing program 2:
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c)
openat(r0, &(0x7f0000000200)='./file0\x00', 0x204000, 0x0)
ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
write$FUSE_LK(0xffffffffffffffff, 0x0, 0xff9c)

04:05:54 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0x1dd, 0x23}])

04:05:54 executing program 3:
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rmdir(&(0x7f0000000580)='./file0\x00')

[  176.707232] audit: type=1400 audit(1555301154.240:41): avc:  denied  { write } for  pid=7379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  176.865111] audit: type=1400 audit(1555301154.240:42): avc:  denied  { read } for  pid=7379 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  176.898080]  loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10
[  176.924449] loop5: p1 start 676025156 is beyond EOD, truncated
[  176.933961] loop5: p2 start 3580720002 is beyond EOD, truncated
[  176.944612] loop5: p3 start 567640662 is beyond EOD, truncated
[  176.956122] loop5: p4 start 3287805347 is beyond EOD, truncated
[  176.966748] loop5: p5 start 1903847135 is beyond EOD, truncated
[  176.976782] loop5: p6 start 1097666722 is beyond EOD, truncated
[  176.987859] loop5: p7 start 3144439700 is beyond EOD, truncated
[  176.996961] loop5: p8 start 3390312448 is beyond EOD, truncated
[  177.006915] loop5: p9 start 1911635093 is beyond EOD, truncated
[  177.015691] loop5: p10 start 263474732 is beyond EOD, truncated
04:05:54 executing program 0:

04:05:54 executing program 3:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x2081f9)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00')
r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={0x0, 0x22b000000000, 0x100000001}, &(0x7f0000000300)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha256-ssse3\x00'/65], 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/4096)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$vsock_stream(r0, &(0x7f0000001100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
fadvise64(0xffffffffffffffff, 0x27, 0x1, 0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000001180)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)

04:05:54 executing program 4:
listen(0xffffffffffffffff, 0x0)
setrlimit(0x6, &(0x7f0000000000)={0x10000000000b35d, 0x800000b35d})
mlockall(0x1)
sync()
mlockall(0x3)
mmap(&(0x7f0000fee000/0x12000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair(0x1d, 0x0, 0x0, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x2)

04:05:54 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000040)='/dev/capi20\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
ppoll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0, 0x0, 0x0)

04:05:54 executing program 1:
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x38)
clone(0x0, &(0x7f0000000140)="40071d78c07e5c25cdd9b157a7e09dfff16f5f7b7923752a2f835d39387b7a8d824d8d14d5642e48017ad0bebfadedbb54a08fdf3af064b59836819b6c2d66b6f8fe157aa4b3016f1645971b6e08b0ccf99259ff7c22f8a48cfd533aea4b87e5f035317dcb1c4b7f243e6b9425d1418f3a0d4b5affdeb3f891a3465adbb08ce2cb45add6ddaaf9394911ea563bd7dd89907719fea55a616881b49b2a42b2e437b77a62d00bf9768705d8fbf36424683bb6ef532ff656c915ff99afccf767c9774a3db9", 0x0, &(0x7f0000000040), &(0x7f0000000240)="8e7d6ff76c8a9b85fd6000c2fe6616242a395b43879dae10bd038aa4b3f57f7d4c7526af5509a2d3dc7358b6cef87fcf1e7ae23657d19f2d90cbe903dbec5f8e70fb98258bd2d2921cc18f561225344a5123018e07df6b138054c335572578aea3b4b2bbe1ed104f93299774bf4214964bba2c4e18b3ba3c551fbf8eccbf62b35f1e31fb8b8ef1a4e57f66bf543e728e98771a290d7f127c332d1065239f43d52904937f53b70757598627c92d07a28f090a74ab66cd1f6e9d0020022d76")
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x1, 0x7c})
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

04:05:54 executing program 2:

[  177.180763]  loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10
[  177.194761] loop5: p1 start 676025156 is beyond EOD, truncated
[  177.205434] loop5: p2 start 3580720002 is beyond EOD, truncated
[  177.217157] loop5: p3 start 567640662 is beyond EOD, truncated
[  177.217551] audit: type=1804 audit(1555301154.880:43): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1
[  177.247966] loop5: p4 start 3287805347 is beyond EOD, truncated
[  177.282741] loop5: p5 start 1903847135 is beyond EOD, truncated
[  177.308871] loop5: p6 start 1097666722 is beyond EOD, truncated
[  177.331647] loop5: p7 start 3144439700 is beyond EOD, truncated
[  177.353297] loop5: p8 start 3390312448 is beyond EOD, truncated
[  177.377317] loop5: p9 start 1911635093 is beyond EOD, truncated
[  177.401974] loop5: p10 start 263474732 is beyond EOD, truncated
04:05:55 executing program 0:

04:05:55 executing program 2:

04:05:55 executing program 2:

[  177.568824] audit: type=1804 audit(1555301154.930:44): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1
04:05:55 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070")
syz_read_part_table(0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000680)="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", 0x1dd, 0x23}])

04:05:55 executing program 0:

[  177.638436] audit: type=1804 audit(1555301154.930:45): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1
04:05:55 executing program 3:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x2081f9)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, 0x0)
mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x0, 0x11, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00')
r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={0x0, 0x22b000000000, 0x100000001}, &(0x7f0000000300)=ANY=[@ANYBLOB='enc=pkcs1 hash=sha256-ssse3\x00'/65], 0x0, 0x0)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000100)=""/4096)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$vsock_stream(r0, &(0x7f0000001100)={0x28, 0x0, 0xffffffff, @reserved}, 0x10)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x40)
futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, &(0x7f0000048000), 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
fadvise64(0xffffffffffffffff, 0x27, 0x1, 0x5)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000001180)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
r5 = open(&(0x7f0000000780)='./bus\x00', 0x14102e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0)
preadv(r3, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c)

04:05:55 executing program 1:

[  177.716797] audit: type=1804 audit(1555301154.950:46): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1
04:05:55 executing program 2:

[  177.764367] audit: type=1804 audit(1555301155.340:47): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir522080932/syzkaller.tILQhj/5/bus" dev="sda1" ino=16551 res=1
[  177.916521] can: request_module (can-proto-0) failed.
04:05:55 executing program 4:

[  177.959307] can: request_module (can-proto-0) failed.
[  427.992626] INFO: task syz-executor.5:7222 blocked for more than 140 seconds.
[  428.001190]       Not tainted 4.14.111 #1
[  428.005360] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.013477] syz-executor.5  D24992  7222      1 0x00000004
[  428.019225] Call Trace:
[  428.022043]  __schedule+0x7be/0x1cf0
[  428.025861]  ? __mutex_lock+0x737/0x1470
[  428.030124]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.035153]  schedule+0x92/0x1c0
[  428.038522]  schedule_preempt_disabled+0x13/0x20
[  428.043895]  __mutex_lock+0x73c/0x1470
[  428.047884]  ? blkdev_reread_part+0x1f/0x40
[  428.052351]  ? mutex_trylock+0x1c0/0x1c0
[  428.056604]  ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[  428.061970]  ? __wake_up_common_lock+0xe3/0x160
[  428.066939]  ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[  428.072257]  mutex_lock_nested+0x16/0x20
[  428.076337]  ? mutex_lock_nested+0x16/0x20
[  428.080739]  blkdev_reread_part+0x1f/0x40
[  428.085372]  loop_reread_partitions+0x7c/0x90
[  428.090172]  loop_clr_fd+0x844/0xae0
[  428.094957]  lo_ioctl+0x8d0/0x1c70
[  428.098724]  ? loop_probe+0x160/0x160
[  428.102852]  blkdev_ioctl+0x983/0x1880
[  428.106763]  ? blkpg_ioctl+0x980/0x980
[  428.110746]  ? __might_sleep+0x93/0xb0
[  428.114757]  block_ioctl+0xde/0x120
[  428.118442]  ? blkdev_fallocate+0x3b0/0x3b0
[  428.122916]  do_vfs_ioctl+0x7b9/0x1070
[  428.127592]  ? selinux_file_mprotect+0x5d0/0x5d0
[  428.135974]  ? ioctl_preallocate+0x1c0/0x1c0
[  428.140835]  ? putname+0xe0/0x120
[  428.144318]  ? do_sys_open+0x221/0x430
[  428.148210]  ? security_file_ioctl+0x83/0xc0
[  428.152755]  ? security_file_ioctl+0x8f/0xc0
[  428.157364]  SyS_ioctl+0x8f/0xc0
[  428.160930]  ? do_vfs_ioctl+0x1070/0x1070
[  428.165125]  do_syscall_64+0x1eb/0x630
[  428.169020]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.174092]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.179412] RIP: 0033:0x458a97
[  428.182773] RSP: 002b:00007fffaa4c37b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  428.190705] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458a97
[  428.198041] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[  428.205643] RBP: 0000000000000019 R08: 0000000000000000 R09: 000000000000000a
[  428.213265] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.220793] R13: 00007fffaa4c37f0 R14: 000000000002b271 R15: 00007fffaa4c3800
[  428.228517] INFO: task syz-executor.0:7223 blocked for more than 140 seconds.
[  428.236440]       Not tainted 4.14.111 #1
[  428.240676] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.248707] syz-executor.0  D24992  7223      1 0x00000004
[  428.254536] Call Trace:
[  428.257139]  __schedule+0x7be/0x1cf0
[  428.260937]  ? __mutex_lock+0x737/0x1470
[  428.265030]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.270330]  schedule+0x92/0x1c0
[  428.273724]  schedule_preempt_disabled+0x13/0x20
[  428.280485]  __mutex_lock+0x73c/0x1470
[  428.284397]  ? lo_ioctl+0x87/0x1c70
[  428.288050]  ? lock_downgrade+0x640/0x6e0
[  428.292290]  ? mutex_trylock+0x1c0/0x1c0
[  428.296383]  ? avc_has_extended_perms+0x8ec/0xe40
[  428.301545]  ? putname+0xdb/0x120
[  428.305138]  ? avc_ss_reset+0x110/0x110
[  428.309385]  ? kasan_slab_free+0x75/0xc0
[  428.313685]  mutex_lock_nested+0x16/0x20
[  428.317926]  ? mutex_lock_nested+0x16/0x20
[  428.322454]  lo_ioctl+0x87/0x1c70
[  428.325939]  ? loop_probe+0x160/0x160
[  428.330601]  blkdev_ioctl+0x983/0x1880
[  428.336292]  ? blkpg_ioctl+0x980/0x980
[  428.340313]  ? __might_sleep+0x93/0xb0
[  428.344215]  block_ioctl+0xde/0x120
[  428.348108]  ? blkdev_fallocate+0x3b0/0x3b0
[  428.352921]  do_vfs_ioctl+0x7b9/0x1070
[  428.357339]  ? selinux_file_mprotect+0x5d0/0x5d0
[  428.362440]  ? ioctl_preallocate+0x1c0/0x1c0
[  428.366902]  ? putname+0xe0/0x120
[  428.370474]  ? do_sys_open+0x221/0x430
[  428.374486]  ? security_file_ioctl+0x83/0xc0
[  428.378895]  ? security_file_ioctl+0x8f/0xc0
[  428.383426]  SyS_ioctl+0x8f/0xc0
[  428.386786]  ? do_vfs_ioctl+0x1070/0x1070
[  428.391064]  do_syscall_64+0x1eb/0x630
[  428.394963]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.399876]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.405485] RIP: 0033:0x458a97
[  428.408688] RSP: 002b:00007ffe05ec4b38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  428.417027] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458a97
[  428.424406] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[  428.431931] RBP: 0000000000000015 R08: 0000000000000000 R09: 000000000000000a
[  428.439381] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.447110] R13: 00007ffe05ec4b70 R14: 000000000002b5b5 R15: 00007ffe05ec4b80
[  428.454557] INFO: task syz-executor.1:7224 blocked for more than 140 seconds.
[  428.462060]       Not tainted 4.14.111 #1
[  428.466278] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.474807] syz-executor.1  D24992  7224      1 0x00000004
[  428.480781] Call Trace:
[  428.483382]  __schedule+0x7be/0x1cf0
[  428.487185]  ? __mutex_lock+0x737/0x1470
[  428.491347]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.496386]  schedule+0x92/0x1c0
[  428.499757]  schedule_preempt_disabled+0x13/0x20
[  428.504746]  __mutex_lock+0x73c/0x1470
[  428.508733]  ? lo_ioctl+0x87/0x1c70
[  428.512576]  ? lock_downgrade+0x640/0x6e0
[  428.516750]  ? mutex_trylock+0x1c0/0x1c0
[  428.520910]  ? avc_has_extended_perms+0x8ec/0xe40
[  428.525818]  ? putname+0xdb/0x120
[  428.529275]  ? avc_ss_reset+0x110/0x110
[  428.533372]  ? kasan_slab_free+0x75/0xc0
[  428.537457]  mutex_lock_nested+0x16/0x20
[  428.541816]  ? mutex_lock_nested+0x16/0x20
[  428.546170]  lo_ioctl+0x87/0x1c70
[  428.549876]  ? loop_probe+0x160/0x160
[  428.553890]  blkdev_ioctl+0x983/0x1880
[  428.557810]  ? blkpg_ioctl+0x980/0x980
[  428.561773]  ? __might_sleep+0x93/0xb0
[  428.565826]  block_ioctl+0xde/0x120
[  428.569459]  ? blkdev_fallocate+0x3b0/0x3b0
[  428.573868]  do_vfs_ioctl+0x7b9/0x1070
[  428.577780]  ? selinux_file_mprotect+0x5d0/0x5d0
[  428.582628]  ? ioctl_preallocate+0x1c0/0x1c0
[  428.587062]  ? putname+0xe0/0x120
[  428.590618]  ? do_sys_open+0x221/0x430
[  428.594591]  ? security_file_ioctl+0x83/0xc0
[  428.599703]  ? security_file_ioctl+0x8f/0xc0
[  428.604227]  SyS_ioctl+0x8f/0xc0
[  428.607715]  ? do_vfs_ioctl+0x1070/0x1070
[  428.612001]  do_syscall_64+0x1eb/0x630
[  428.615995]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.621044]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.626296] RIP: 0033:0x458a97
[  428.629725] RSP: 002b:00007ffcbe584d98 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  428.637826] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000458a97
[  428.645505] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[  428.653368] RBP: 0000000000000009 R08: 0000000000000000 R09: 000000000000000a
[  428.660819] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.669339] R13: 00007ffcbe584dd0 R14: 000000000002b54a R15: 00007ffcbe584de0
[  428.677040] INFO: task syz-executor.3:7225 blocked for more than 140 seconds.
[  428.684407]       Not tainted 4.14.111 #1
[  428.688595] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.697068] syz-executor.3  D24992  7225      1 0x00000004
[  428.702838] Call Trace:
[  428.705660]  __schedule+0x7be/0x1cf0
[  428.709386]  ? __mutex_lock+0x737/0x1470
[  428.713530]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.718646]  schedule+0x92/0x1c0
[  428.722087]  schedule_preempt_disabled+0x13/0x20
[  428.726864]  __mutex_lock+0x73c/0x1470
[  428.730830]  ? trace_hardirqs_on+0x10/0x10
[  428.735082]  ? lo_release+0x84/0x1b0
[  428.738819]  ? save_trace+0x1f0/0x290
[  428.742756]  ? mutex_trylock+0x1c0/0x1c0
[  428.746832]  ? __blkdev_put+0x397/0x7f0
[  428.750872]  ? find_held_lock+0x35/0x130
[  428.755054]  ? __blkdev_put+0x397/0x7f0
[  428.759475]  ? loop_clr_fd+0xae0/0xae0
[  428.763939]  mutex_lock_nested+0x16/0x20
[  428.768030]  ? mutex_lock_nested+0x16/0x20
[  428.772711]  lo_release+0x84/0x1b0
[  428.776655]  ? loop_clr_fd+0xae0/0xae0
[  428.781748]  __blkdev_put+0x436/0x7f0
[  428.785848]  ? bd_set_size+0xb0/0xb0
[  428.789567]  ? wait_for_completion+0x420/0x420
[  428.795069]  blkdev_put+0x88/0x510
[  428.798703]  ? fcntl_setlk+0xb90/0xb90
[  428.802709]  ? blkdev_put+0x510/0x510
[  428.806546]  blkdev_close+0x8b/0xb0
[  428.810278]  __fput+0x277/0x7a0
[  428.813575]  ____fput+0x16/0x20
[  428.816848]  task_work_run+0x119/0x190
[  428.820913]  exit_to_usermode_loop+0x1da/0x220
[  428.825915]  do_syscall_64+0x4a9/0x630
[  428.830493]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  428.835365]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  428.840751] RIP: 0033:0x4129c0
[  428.844044] RSP: 002b:00007ffc0b9325e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  428.851839] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 00000000004129c0
[  428.859178] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 0000000000000003
[  428.866624] RBP: 000000000000000e R08: 0000000000000000 R09: 000000000000000a
[  428.873986] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  428.881366] R13: 00007ffc0b932620 R14: 000000000002b41b R15: 00007ffc0b932630
[  428.888693] INFO: task syz-executor.4:7226 blocked for more than 140 seconds.
[  428.896175]       Not tainted 4.14.111 #1
[  428.900368] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  428.908606] syz-executor.4  D25168  7226      1 0x00000004
[  428.914438] Call Trace:
[  428.917058]  __schedule+0x7be/0x1cf0
[  428.920976]  ? __mutex_lock+0x737/0x1470
[  428.925238]  ? pci_mmcfg_check_reserved+0x150/0x150
[  428.930364]  schedule+0x92/0x1c0
[  428.933758]  schedule_preempt_disabled+0x13/0x20
[  428.938528]  __mutex_lock+0x73c/0x1470
[  428.942530]  ? trace_hardirqs_on+0x10/0x10
[  428.946782]  ? lo_open+0x1d/0xb0
[  428.950406]  ? refcount_inc_not_zero+0x80/0xe0
[  428.955058]  ? mutex_trylock+0x1c0/0x1c0
[  428.959161]  ? find_held_lock+0x35/0x130
[  428.963360]  ? disk_get_part+0x9c/0x140
[  428.967355]  ? lock_downgrade+0x6e0/0x6e0
[  428.971607]  ? loop_unregister_transfer+0x90/0x90
[  428.976528]  mutex_lock_nested+0x16/0x20
[  428.980698]  ? mutex_lock_nested+0x16/0x20
[  428.984957]  lo_open+0x1d/0xb0
[  428.988137]  __blkdev_get+0x2c9/0x1120
[  428.992192]  ? __blkdev_put+0x7f0/0x7f0
[  428.996199]  ? bd_acquire+0x178/0x2c0
[  429.000160]  ? find_held_lock+0x35/0x130
[  429.004259]  blkdev_get+0xa8/0x8e0
[  429.007825]  ? bd_may_claim+0xd0/0xd0
[  429.011793]  ? _raw_spin_unlock+0x2d/0x50
[  429.016045]  blkdev_open+0x1d1/0x260
[  429.019809]  ? security_file_open+0x8f/0x1a0
[  429.024413]  do_dentry_open+0x73e/0xeb0
[  429.028493]  ? bd_acquire+0x2c0/0x2c0
[  429.032940]  vfs_open+0x105/0x230
[  429.036410]  path_openat+0x8bd/0x3f70
[  429.040648]  ? trace_hardirqs_on+0x10/0x10
[  429.045327]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  429.050157]  ? find_held_lock+0x35/0x130
[  429.054268]  ? __alloc_fd+0x1d4/0x4a0
[  429.058078]  do_filp_open+0x18e/0x250
[  429.061978]  ? may_open_dev+0xe0/0xe0
[  429.066084]  ? _raw_spin_unlock+0x2d/0x50
[  429.070352]  ? __alloc_fd+0x1d4/0x4a0
[  429.074180]  do_sys_open+0x2c5/0x430
[  429.077907]  ? filp_open+0x70/0x70
[  429.081552]  SyS_open+0x2d/0x40
[  429.084856]  ? do_sys_open+0x430/0x430
[  429.088770]  do_syscall_64+0x1eb/0x630
[  429.092884]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.097772]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.103062] RIP: 0033:0x412ba0
[  429.106267] RSP: 002b:00007ffcc242b3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  429.114049] RAX: ffffffffffffffda RBX: 000000000002b704 RCX: 0000000000412ba0
[  429.121497] RDX: 00007ffcc242b47a RSI: 0000000000000002 RDI: 00007ffcc242b470
[  429.128990] RBP: 000000000000000e R08: 0000000000000000 R09: 000000000000000a
[  429.136598] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  429.143981] R13: 00007ffcc242b420 R14: 000000000002b420 R15: 00007ffcc242b430
[  429.151351] INFO: task syz-executor.2:7227 blocked for more than 140 seconds.
[  429.158676]       Not tainted 4.14.111 #1
[  429.162974] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.171037] syz-executor.2  D25168  7227      1 0x00000004
[  429.176843] Call Trace:
[  429.179448]  __schedule+0x7be/0x1cf0
[  429.183251]  ? __mutex_lock+0x737/0x1470
[  429.187381]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.192693]  schedule+0x92/0x1c0
[  429.196963]  schedule_preempt_disabled+0x13/0x20
[  429.202239]  __mutex_lock+0x73c/0x1470
[  429.206388]  ? trace_hardirqs_on+0x10/0x10
[  429.211086]  ? lo_open+0x1d/0xb0
[  429.214717]  ? refcount_inc_not_zero+0x80/0xe0
[  429.219341]  ? mutex_trylock+0x1c0/0x1c0
[  429.223615]  ? find_held_lock+0x35/0x130
[  429.227732]  ? disk_get_part+0x9c/0x140
[  429.231818]  ? lock_downgrade+0x6e0/0x6e0
[  429.236123]  ? loop_unregister_transfer+0x90/0x90
[  429.241075]  mutex_lock_nested+0x16/0x20
[  429.245154]  ? mutex_lock_nested+0x16/0x20
[  429.249461]  lo_open+0x1d/0xb0
[  429.252736]  __blkdev_get+0x2c9/0x1120
[  429.256835]  ? __blkdev_put+0x7f0/0x7f0
[  429.261024]  ? bd_acquire+0x178/0x2c0
[  429.264832]  ? find_held_lock+0x35/0x130
[  429.268912]  blkdev_get+0xa8/0x8e0
[  429.272551]  ? bd_may_claim+0xd0/0xd0
[  429.276369]  ? _raw_spin_unlock+0x2d/0x50
[  429.280774]  blkdev_open+0x1d1/0x260
[  429.284518]  ? security_file_open+0x8f/0x1a0
[  429.288923]  do_dentry_open+0x73e/0xeb0
[  429.292999]  ? bd_acquire+0x2c0/0x2c0
[  429.297087]  vfs_open+0x105/0x230
[  429.300726]  path_openat+0x8bd/0x3f70
[  429.304543]  ? trace_hardirqs_on+0x10/0x10
[  429.308870]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  429.313632]  ? find_held_lock+0x35/0x130
[  429.317763]  ? __alloc_fd+0x1d4/0x4a0
[  429.322007]  do_filp_open+0x18e/0x250
[  429.326194]  ? may_open_dev+0xe0/0xe0
[  429.330142]  ? _raw_spin_unlock+0x2d/0x50
[  429.334422]  ? __alloc_fd+0x1d4/0x4a0
[  429.338237]  do_sys_open+0x2c5/0x430
[  429.342087]  ? filp_open+0x70/0x70
[  429.345709]  SyS_open+0x2d/0x40
[  429.349440]  ? do_sys_open+0x430/0x430
[  429.353418]  do_syscall_64+0x1eb/0x630
[  429.357326]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.362554]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.367755] RIP: 0033:0x412ba0
[  429.371116] RSP: 002b:00007ffc5441f008 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  429.379132] RAX: ffffffffffffffda RBX: 000000000002b65f RCX: 0000000000412ba0
[  429.386537] RDX: 00007ffc5441f09a RSI: 0000000000000002 RDI: 00007ffc5441f090
[  429.393897] RBP: 0000000000000013 R08: 0000000000000000 R09: 000000000000000a
[  429.401271] R10: 0000000000000075 R11: 0000000000000246 R12: 0000000000000000
[  429.408742] R13: 00007ffc5441f040 R14: 000000000002b65f R15: 00007ffc5441f050
[  429.416229] INFO: task blkid:7425 blocked for more than 140 seconds.
[  429.422990]       Not tainted 4.14.111 #1
[  429.427369] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.435757] blkid           D28760  7425   7332 0x00000004
[  429.441624] Call Trace:
[  429.444279]  __schedule+0x7be/0x1cf0
[  429.447984]  ? __mutex_lock+0x737/0x1470
[  429.452145]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.457236]  schedule+0x92/0x1c0
[  429.460696]  schedule_preempt_disabled+0x13/0x20
[  429.465805]  __mutex_lock+0x73c/0x1470
[  429.469794]  ? lo_ioctl+0x87/0x1c70
[  429.473506]  ? lock_downgrade+0x640/0x6e0
[  429.477863]  ? mutex_trylock+0x1c0/0x1c0
[  429.482027]  ? avc_has_extended_perms+0x8ec/0xe40
[  429.486890]  ? __might_fault+0x110/0x1d0
[  429.491039]  ? avc_ss_reset+0x110/0x110
[  429.495074]  mutex_lock_nested+0x16/0x20
[  429.499139]  ? mutex_lock_nested+0x16/0x20
[  429.503462]  lo_ioctl+0x87/0x1c70
[  429.507006]  ? loop_probe+0x160/0x160
[  429.511211]  blkdev_ioctl+0x983/0x1880
[  429.515110]  ? blkpg_ioctl+0x980/0x980
[  429.518994]  ? __might_sleep+0x93/0xb0
[  429.522991]  ? save_trace+0x290/0x290
[  429.526809]  block_ioctl+0xde/0x120
[  429.530895]  ? blkdev_fallocate+0x3b0/0x3b0
[  429.535237]  do_vfs_ioctl+0x7b9/0x1070
[  429.539125]  ? selinux_file_mprotect+0x5d0/0x5d0
[  429.544126]  ? ioctl_preallocate+0x1c0/0x1c0
[  429.548546]  ? lock_downgrade+0x6e0/0x6e0
[  429.552794]  ? security_file_ioctl+0x83/0xc0
[  429.557251]  ? security_file_ioctl+0x8f/0xc0
[  429.561765]  SyS_ioctl+0x8f/0xc0
[  429.565162]  ? do_vfs_ioctl+0x1070/0x1070
[  429.569855]  do_syscall_64+0x1eb/0x630
[  429.573837]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.578742]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.584059] RIP: 0033:0x7ff8733f5347
[  429.588053] RSP: 002b:00007ffee3546798 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  429.595985] RAX: ffffffffffffffda RBX: 0000000001771030 RCX: 00007ff8733f5347
[  429.603415] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003
[  429.610879] RBP: 0000000000000003 R08: 00007ff8736a55a0 R09: 0000000000000008
[  429.618290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.625772] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005
[  429.633137] INFO: task blkid:7434 blocked for more than 140 seconds.
[  429.639686]       Not tainted 4.14.111 #1
[  429.643942] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.651989] blkid           D29040  7434   7187 0x00000004
[  429.657657] Call Trace:
[  429.660362]  __schedule+0x7be/0x1cf0
[  429.664102]  ? __mutex_lock+0x737/0x1470
[  429.668177]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.673340]  schedule+0x92/0x1c0
[  429.676866]  schedule_preempt_disabled+0x13/0x20
[  429.681743]  __mutex_lock+0x73c/0x1470
[  429.685661]  ? lo_ioctl+0x87/0x1c70
[  429.689302]  ? lock_downgrade+0x640/0x6e0
[  429.693573]  ? mutex_trylock+0x1c0/0x1c0
[  429.697791]  ? avc_has_extended_perms+0x8ec/0xe40
[  429.703028]  ? __might_fault+0x110/0x1d0
[  429.707396]  ? avc_ss_reset+0x110/0x110
[  429.711471]  mutex_lock_nested+0x16/0x20
[  429.715551]  ? mutex_lock_nested+0x16/0x20
[  429.719933]  lo_ioctl+0x87/0x1c70
[  429.723591]  ? loop_probe+0x160/0x160
[  429.727456]  blkdev_ioctl+0x983/0x1880
[  429.731425]  ? blkpg_ioctl+0x980/0x980
[  429.735597]  ? __might_sleep+0x93/0xb0
[  429.739481]  ? save_trace+0x290/0x290
[  429.743394]  block_ioctl+0xde/0x120
[  429.747126]  ? blkdev_fallocate+0x3b0/0x3b0
[  429.751730]  do_vfs_ioctl+0x7b9/0x1070
[  429.756074]  ? selinux_file_mprotect+0x5d0/0x5d0
[  429.761035]  ? ioctl_preallocate+0x1c0/0x1c0
[  429.765456]  ? lock_downgrade+0x6e0/0x6e0
[  429.769650]  ? security_file_ioctl+0x83/0xc0
[  429.774159]  ? security_file_ioctl+0x8f/0xc0
[  429.778819]  SyS_ioctl+0x8f/0xc0
[  429.782290]  ? do_vfs_ioctl+0x1070/0x1070
[  429.786473]  do_syscall_64+0x1eb/0x630
[  429.790594]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  429.795457]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  429.800717] RIP: 0033:0x7f7cacd79347
[  429.804438] RSP: 002b:00007ffd7aa8c7e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  429.812287] RAX: ffffffffffffffda RBX: 0000000000fc9030 RCX: 00007f7cacd79347
[  429.819843] RDX: 0000000000000000 RSI: 0000000000005331 RDI: 0000000000000003
[  429.827217] RBP: 0000000000000003 R08: 00007f7cad0295a0 R09: 0000000000000008
[  429.834617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  429.842187] R13: 0000000000000000 R14: 0000000000000003 R15: 0000000000000005
[  429.849491] INFO: task blkid:7440 blocked for more than 140 seconds.
[  429.856087]       Not tainted 4.14.111 #1
[  429.860310] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  429.868376] blkid           D29040  7440   7186 0x00000004
[  429.874196] Call Trace:
[  429.876809]  __schedule+0x7be/0x1cf0
[  429.880667]  ? __mutex_lock+0x737/0x1470
[  429.884756]  ? pci_mmcfg_check_reserved+0x150/0x150
[  429.889840]  schedule+0x92/0x1c0
[  429.893327]  schedule_preempt_disabled+0x13/0x20
[  429.898111]  __mutex_lock+0x73c/0x1470
[  429.902448]  ? lo_open+0x1d/0xb0
[  429.905965]  ? refcount_inc_not_zero+0x80/0xe0
[  429.911306]  ? mutex_trylock+0x1c0/0x1c0
[  429.915447]  ? exact_match+0xd/0x20
[  429.919111]  ? kobj_lookup+0x319/0x410
[  429.923101]  ? loop_unregister_transfer+0x90/0x90
[  429.928054]  mutex_lock_nested+0x16/0x20
[  429.932208]  ? mutex_lock_nested+0x16/0x20
[  429.936521]  lo_open+0x1d/0xb0
[  429.939724]  __blkdev_get+0xab1/0x1120
[  429.943778]  ? __blkdev_put+0x7f0/0x7f0
[  429.947791]  ? bd_acquire+0x178/0x2c0
[  429.951763]  ? find_held_lock+0x35/0x130
[  429.955874]  blkdev_get+0xa8/0x8e0
[  429.959766]  ? bd_may_claim+0xd0/0xd0
[  429.963848]  ? _raw_spin_unlock+0x2d/0x50
[  429.968124]  blkdev_open+0x1d1/0x260
[  429.972190]  ? security_file_open+0x8f/0x1a0
[  429.976786]  do_dentry_open+0x73e/0xeb0
[  429.981392]  ? bd_acquire+0x2c0/0x2c0
[  429.985304]  vfs_open+0x105/0x230
[  429.988790]  path_openat+0x8bd/0x3f70
[  429.992816]  ? trace_hardirqs_on+0x10/0x10
[  429.997282]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  430.002483]  ? find_held_lock+0x35/0x130
[  430.006589]  ? __alloc_fd+0x1d4/0x4a0
[  430.010480]  do_filp_open+0x18e/0x250
[  430.014295]  ? may_open_dev+0xe0/0xe0
[  430.018443]  ? _raw_spin_unlock+0x2d/0x50
[  430.022722]  ? __alloc_fd+0x1d4/0x4a0
[  430.026825]  do_sys_open+0x2c5/0x430
[  430.030624]  ? filp_open+0x70/0x70
[  430.034636]  SyS_open+0x2d/0x40
[  430.038092]  ? do_sys_open+0x430/0x430
[  430.042375]  do_syscall_64+0x1eb/0x630
[  430.046762]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  430.051787]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  430.057003] RIP: 0033:0x7f7d81822120
[  430.060822] RSP: 002b:00007ffdf08850d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  430.069683] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d81822120
[  430.077127] RDX: 00007ffdf0886f41 RSI: 0000000000000000 RDI: 00007ffdf0886f41
[  430.084668] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[  430.092038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000e4e030
[  430.099808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[  430.107260] INFO: task blkid:7441 blocked for more than 140 seconds.
[  430.113886]       Not tainted 4.14.111 #1
[  430.118496] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  430.126595] blkid           D29040  7441   7401 0x00000004
[  430.132439] Call Trace:
[  430.135220]  __schedule+0x7be/0x1cf0
[  430.139069]  ? __mutex_lock+0x737/0x1470
[  430.143258]  ? pci_mmcfg_check_reserved+0x150/0x150
[  430.148428]  schedule+0x92/0x1c0
[  430.151939]  schedule_preempt_disabled+0x13/0x20
[  430.156843]  __mutex_lock+0x73c/0x1470
[  430.161023]  ? __mutex_unlock_slowpath+0x71/0x800
[  430.165898]  ? __blkdev_get+0x145/0x1120
[  430.171176]  ? mutex_trylock+0x1c0/0x1c0
[  430.175437]  ? exact_match+0xd/0x20
[  430.179286]  ? kobj_lookup+0x319/0x410
[  430.183525]  ? blkdev_ioctl+0x1880/0x1880
[  430.188648]  mutex_lock_nested+0x16/0x20
[  430.192809]  ? mutex_lock_nested+0x16/0x20
[  430.197159]  __blkdev_get+0x145/0x1120
[  430.201315]  ? __blkdev_put+0x7f0/0x7f0
[  430.205415]  ? bd_acquire+0x178/0x2c0
[  430.209224]  ? find_held_lock+0x35/0x130
[  430.213370]  blkdev_get+0xa8/0x8e0
[  430.217651]  ? bd_may_claim+0xd0/0xd0
[  430.221575]  ? _raw_spin_unlock+0x2d/0x50
[  430.225839]  blkdev_open+0x1d1/0x260
[  430.229593]  ? security_file_open+0x8f/0x1a0
[  430.234348]  do_dentry_open+0x73e/0xeb0
[  430.238354]  ? bd_acquire+0x2c0/0x2c0
[  430.242711]  vfs_open+0x105/0x230
[  430.246184]  path_openat+0x8bd/0x3f70
[  430.249994]  ? trace_hardirqs_on+0x10/0x10
[  430.254328]  ? path_lookupat.isra.0+0x7b0/0x7b0
[  430.259017]  ? find_held_lock+0x35/0x130
[  430.263224]  ? __alloc_fd+0x1d4/0x4a0
[  430.267052]  do_filp_open+0x18e/0x250
[  430.270941]  ? may_open_dev+0xe0/0xe0
[  430.274787]  ? _raw_spin_unlock+0x2d/0x50
[  430.278936]  ? __alloc_fd+0x1d4/0x4a0
[  430.282907]  do_sys_open+0x2c5/0x430
[  430.286645]  ? filp_open+0x70/0x70
[  430.290455]  SyS_open+0x2d/0x40
[  430.293841]  ? do_sys_open+0x430/0x430
[  430.297739]  do_syscall_64+0x1eb/0x630
[  430.301739]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  430.306607]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  430.311869] RIP: 0033:0x7f05614d3120
[  430.315859] RSP: 002b:00007ffdd91fd338 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  430.323734] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05614d3120
[  430.331091] RDX: 00007ffdd91fef34 RSI: 0000000000000000 RDI: 00007ffdd91fef34
[  430.338381] RBP: 0000000000000000 R08: 0000000000000078 R09: 0000000000000000
[  430.345987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000cf6030
[  430.353530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000005
[  430.361096] 
[  430.361096] Showing all locks held in the system:
[  430.367564] 1 lock held by khungtaskd/1009:
[  430.372048]  #0:  (tasklist_lock){.+.+}, at: [<ffffffff81486028>] debug_show_all_locks+0x7f/0x21f
[  430.381205] 1 lock held by rsyslogd/7055:
[  430.385358]  #0:  (&f->f_pos_lock){+.+.}, at: [<ffffffff8193df4b>] __fdget_pos+0xab/0xd0
[  430.393698] 2 locks held by getty/7177:
[  430.397683]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.406511]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.415929] 2 locks held by getty/7178:
[  430.419961]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.428984]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.438382] 2 locks held by getty/7179:
[  430.442456]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.451232]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.460836] 2 locks held by getty/7180:
[  430.464818]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.473618]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.482990] 2 locks held by getty/7181:
[  430.487097]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.496647]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.506116] 2 locks held by getty/7182:
[  430.510195]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.518908]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.528311] 2 locks held by getty/7183:
[  430.532517]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff861a89e3>] ldsem_down_read+0x33/0x40
[  430.541585]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff83107006>] n_tty_read+0x1e6/0x17b0
[  430.551535] 2 locks held by syz-executor.5/7222:
[  430.556348]  #0:  (loop_ctl_mutex/1){+.+.}, at: [<ffffffff83737707>] lo_ioctl+0x87/0x1c70
[  430.565095]  #1:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff82ca511f>] blkdev_reread_part+0x1f/0x40
[  430.574267] 1 lock held by syz-executor.0/7223:
[  430.578947]  #0:  (loop_ctl_mutex/1){+.+.}, at: [<ffffffff83737707>] lo_ioctl+0x87/0x1c70
[  430.588107] 1 lock held by syz-executor.1/7224:
[  430.592874]  #0:  (loop_ctl_mutex/1){+.+.}, at: [<ffffffff83737707>] lo_ioctl+0x87/0x1c70
[  430.601510] 3 locks held by syz-executor.3/7225:
[  430.606291]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a2bc6>] __blkdev_put+0xa6/0x7f0
[  430.615079]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff83735a2e>] lo_release+0x1e/0x1b0
[  430.623624]  #2:  (loop_ctl_mutex#2){+.+.}, at: [<ffffffff83735a94>] lo_release+0x84/0x1b0
[  430.633106] 2 locks held by syz-executor.4/7226:
[  430.637907]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a3455>] __blkdev_get+0x145/0x1120
[  430.647097]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff83730e7d>] lo_open+0x1d/0xb0
[  430.655295] 2 locks held by syz-executor.2/7227:
[  430.660153]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a3455>] __blkdev_get+0x145/0x1120
[  430.668868]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff83730e7d>] lo_open+0x1d/0xb0
[  430.677201] 1 lock held by blkid/7425:
[  430.681153]  #0:  (loop_ctl_mutex/1){+.+.}, at: [<ffffffff83737707>] lo_ioctl+0x87/0x1c70
[  430.689828] 1 lock held by blkid/7434:
[  430.693930]  #0:  (loop_ctl_mutex/1){+.+.}, at: [<ffffffff83737707>] lo_ioctl+0x87/0x1c70
[  430.702375] 2 locks held by blkid/7440:
[  430.706386]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a3455>] __blkdev_get+0x145/0x1120
[  430.715307]  #1:  (loop_index_mutex){+.+.}, at: [<ffffffff83730e7d>] lo_open+0x1d/0xb0
[  430.723482] 1 lock held by blkid/7441:
[  430.727369]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a3455>] __blkdev_get+0x145/0x1120
[  430.736317] 1 lock held by blkid/7444:
[  430.740568]  #0:  (&bdev->bd_mutex){+.+.}, at: [<ffffffff819a3455>] __blkdev_get+0x145/0x1120
[  430.749303] 
[  430.751006] =============================================
[  430.751006] 
[  430.758376] NMI backtrace for cpu 0
[  430.762162] CPU: 0 PID: 1009 Comm: khungtaskd Not tainted 4.14.111 #1
[  430.768780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  430.779920] Call Trace:
[  430.782538]  dump_stack+0x138/0x19c
[  430.786160]  nmi_cpu_backtrace.cold+0x57/0x94
[  430.790696]  ? irq_force_complete_move.cold+0x7d/0x7d
[  430.796057]  nmi_trigger_cpumask_backtrace+0x141/0x189
[  430.801344]  arch_trigger_cpumask_backtrace+0x14/0x20
[  430.806583]  watchdog+0x5d8/0xb80
[  430.810033]  kthread+0x31c/0x430
[  430.813387]  ? reset_hung_task_detector+0x20/0x20
[  430.818223]  ? kthread_create_on_node+0xd0/0xd0
[  430.822892]  ret_from_fork+0x3a/0x50
[  430.826813] Sending NMI from CPU 0 to CPUs 1:
[  430.831723] NMI backtrace for cpu 1
[  430.831728] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 4.14.111 #1
[  430.831732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  430.831735] task: ffff8880a9d1c340 task.stack: ffff8880a9d28000
[  430.831737] RIP: 0010:_local_bh_enable+0x1d/0x30
[  430.831739] RSP: 0018:ffff8880aef07f78 EFLAGS: 00000083
[  430.831744] RAX: 0000000080000201 RBX: ffff8880a9d1c340 RCX: 0000000000000000
[  430.831747] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000200
[  430.831750] RBP: ffff8880aef07f88 R08: 0000000000000001 R09: ffff88821fff8048
[  430.831753] R10: ffff88821fff8050 R11: 0000000000000001 R12: ffff8880a9d1c340
[  430.831757] R13: ffff8880aef00000 R14: ffff8880a9d1c340 R15: 0000000000000000
[  430.831761] FS:  0000000000000000(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000
[  430.831764] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  430.831767] CR2: 000000000162b000 CR3: 00000000a9be7000 CR4: 00000000001406e0
[  430.831769] Call Trace:
[  430.831771]  <IRQ>
[  430.831774]  ? irq_enter+0xc2/0xe0
[  430.831776]  scheduler_ipi+0xba/0x4e0
[  430.831779]  smp_reschedule_interrupt+0x89/0x500
[  430.831782]  reschedule_interrupt+0x8e/0xa0
[  430.831784]  </IRQ>
[  430.831787] RIP: 0010:native_safe_halt+0x2/0x10
[  430.831790] RSP: 0018:ffff8880a9d2fe70 EFLAGS: 00000286 ORIG_RAX: ffffffffffffff02
[  430.831796] RAX: 1ffffffff0ee2968 RBX: ffff8880a9d1c340 RCX: 0000000000000000
[  430.831799] RDX: dffffc0000000000 RSI: 0000000000000001 RDI: ffff8880a9d1cbbc
[  430.831803] RBP: ffff8880a9d2fe98 R08: 1ffffffff1049801 R09: 0000000000000000
[  430.831807] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff87714b30
[  430.831810] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880a9d1c340
[  430.831812]  ? default_idle+0x4c/0x380
[  430.831815]  arch_cpu_idle+0x10/0x20
[  430.831817]  default_idle_call+0x36/0x90
[  430.831820]  do_idle+0x262/0x3d0
[  430.831822]  cpu_startup_entry+0x1b/0x20
[  430.831825]  start_secondary+0x362/0x4d0
[  430.831828]  secondary_startup_64+0xa5/0xb0
[  430.831829] Code: c7 20 4b 71 87 e8 34 99 4d 00 eb a6 66 90 55 48 89 e5 65 8b 05 25 48 c9 7e a9 00 00 0f 00 75 0c bf 00 02 00 00 e8 64 ff ff ff 5d <c3> 0f 0b bf 00 02 00 00 e8 56 ff ff ff 5d c3 0f 1f 40 00 48 c7 
[  430.833064] Kernel panic - not syncing: hung_task: blocked tasks
[  431.056449] CPU: 0 PID: 1009 Comm: khungtaskd Not tainted 4.14.111 #1
[  431.063041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  431.072512] Call Trace:
[  431.075123]  dump_stack+0x138/0x19c
[  431.078851]  panic+0x1f2/0x438
[  431.082057]  ? add_taint.cold+0x16/0x16
[  431.086161]  ? ___preempt_schedule+0x16/0x18
[  431.090573]  watchdog+0x5e9/0xb80
[  431.094038]  kthread+0x31c/0x430
[  431.098499]  ? reset_hung_task_detector+0x20/0x20
[  431.103366]  ? kthread_create_on_node+0xd0/0xd0
[  431.108039]  ret_from_fork+0x3a/0x50
[  431.112912] Kernel Offset: disabled
[  431.116604] Rebooting in 86400 seconds..