[   43.520695][   T25] audit: type=1800 audit(1570809043.531:22): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="motd" dev="sda1" ino=2480 res=0
[   43.550821][   T25] audit: type=1800 audit(1570809043.531:23): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rsyslog" dev="sda1" ino=2475 res=0
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[   44.254793][ T7152] sshd (7152) used greatest stack depth: 10032 bytes left
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.236' (ECDSA) to the list of known hosts.
2019/10/11 15:50:55 fuzzer started
2019/10/11 15:50:56 dialing manager at 10.128.0.105:43913
2019/10/11 15:50:56 syscalls: 2523
2019/10/11 15:50:56 code coverage: enabled
2019/10/11 15:50:56 comparison tracing: enabled
2019/10/11 15:50:56 extra coverage: extra coverage is not supported by the kernel
2019/10/11 15:50:56 setuid sandbox: enabled
2019/10/11 15:50:56 namespace sandbox: enabled
2019/10/11 15:50:56 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/11 15:50:56 fault injection: enabled
2019/10/11 15:50:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/11 15:50:56 net packet injection: enabled
2019/10/11 15:50:56 net device setup: enabled
2019/10/11 15:50:56 concurrency sanitizer: enabled
15:50:58 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

syzkaller login: [   58.914126][ T7258] IPVS: ftp: loaded support on port[0] = 21
15:50:59 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

[   58.999629][ T7258] chnl_net:caif_netlink_parms(): no params data found
[   59.038968][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.046703][ T7258] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.062295][ T7258] device bridge_slave_0 entered promiscuous mode
[   59.078424][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.085605][ T7258] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.108170][ T7258] device bridge_slave_1 entered promiscuous mode
[   59.160876][ T7258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   59.179396][ T7258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   59.204168][ T7258] team0: Port device team_slave_0 added
[   59.211180][ T7258] team0: Port device team_slave_1 added
[   59.310065][ T7258] device hsr_slave_0 entered promiscuous mode
15:50:59 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

[   59.379074][ T7258] device hsr_slave_1 entered promiscuous mode
[   59.445209][ T7258] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.452337][ T7258] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.459704][ T7258] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.466751][ T7258] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.516859][ T7261] IPVS: ftp: loaded support on port[0] = 21
15:50:59 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

[   59.629456][ T7258] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.676657][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.689005][   T17] bridge0: port 1(bridge_slave_0) entered disabled state
[   59.717529][   T17] bridge0: port 2(bridge_slave_1) entered disabled state
[   59.748502][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[   59.773544][ T7258] 8021q: adding VLAN 0 to HW filter on device team0
[   59.809315][ T7267] IPVS: ftp: loaded support on port[0] = 21
[   59.816168][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.839132][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.846201][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.890126][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.908907][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.915996][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.007613][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.016368][ T7268] IPVS: ftp: loaded support on port[0] = 21
[   60.038409][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.048388][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.058713][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.068742][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.078968][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.091137][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
15:51:00 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

[   60.109105][ T7261] chnl_net:caif_netlink_parms(): no params data found
[   60.133670][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.143039][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.166860][ T7258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.250695][ T7258] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.283789][ T7261] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.297213][ T7261] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.305071][ T7261] device bridge_slave_0 entered promiscuous mode
[   60.344460][ T7261] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.366746][ T7261] bridge0: port 2(bridge_slave_1) entered disabled state
[   60.388071][ T7261] device bridge_slave_1 entered promiscuous mode
[   60.428388][ T7267] chnl_net:caif_netlink_parms(): no params data found
[   60.485424][ T7261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   60.513654][ T7261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   60.555890][ T7276] IPVS: ftp: loaded support on port[0] = 21
15:51:00 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

[   60.619157][ T7261] team0: Port device team_slave_0 added
[   60.663117][ T7261] team0: Port device team_slave_1 added
[   60.726189][ T7267] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.753109][ T7267] bridge0: port 1(bridge_slave_0) entered disabled state
[   60.769141][ T7267] device bridge_slave_0 entered promiscuous mode
15:51:00 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

[   60.801096][ T7267] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.818752][ T7267] bridge0: port 2(bridge_slave_1) entered disabled state
15:51:00 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

[   60.846600][ T7267] device bridge_slave_1 entered promiscuous mode
15:51:00 executing program 0:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

[   60.920334][ T7261] device hsr_slave_0 entered promiscuous mode
[   60.987807][ T7261] device hsr_slave_1 entered promiscuous mode
[   61.018021][ T7261] debugfs: Directory 'hsr0' with parent '/' already present!
15:51:01 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

[   61.034695][ T7268] chnl_net:caif_netlink_parms(): no params data found
[   61.072433][ T7267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.105865][ T7267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.221047][ T7261] 8021q: adding VLAN 0 to HW filter on device bond0
[   61.238976][ T7276] chnl_net:caif_netlink_parms(): no params data found
[   61.249430][ T7267] team0: Port device team_slave_0 added
[   61.277422][ T7267] team0: Port device team_slave_1 added
[   61.291333][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.296285][ T7295] IPVS: ftp: loaded support on port[0] = 21
[   61.299119][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.317586][ T7268] device bridge_slave_0 entered promiscuous mode
[   61.325753][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.333392][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.341497][ T7268] device bridge_slave_1 entered promiscuous mode
[   61.349750][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   61.358279][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   61.367714][ T7261] 8021q: adding VLAN 0 to HW filter on device team0
15:51:01 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

[   61.419588][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.491051][ T7267] device hsr_slave_0 entered promiscuous mode
[   61.547468][ T7267] device hsr_slave_1 entered promiscuous mode
[   61.587156][ T7267] debugfs: Directory 'hsr0' with parent '/' already present!
[   61.596092][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   61.605722][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   61.614530][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   61.622937][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.629998][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   61.641421][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state
[   61.649153][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.656843][ T7276] device bridge_slave_0 entered promiscuous mode
[   61.668512][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.675569][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.683591][ T7276] device bridge_slave_1 entered promiscuous mode
[   61.699284][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   61.714704][ T7261] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   61.725246][ T7261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   61.751312][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   61.760873][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   61.769377][   T17] bridge0: port 2(bridge_slave_1) entered blocking state
[   61.776442][   T17] bridge0: port 2(bridge_slave_1) entered forwarding state
[   61.784550][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   61.793767][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   61.802902][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   61.811492][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   61.820376][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   61.829215][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   61.838219][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   61.846604][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   61.855360][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   61.863991][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   61.872746][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   61.881348][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
15:51:01 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

[   61.918286][ T7268] team0: Port device team_slave_0 added
[   61.949214][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   61.969761][ T7268] team0: Port device team_slave_1 added
[   61.984631][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.010560][ T7261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   62.046401][ T7276] team0: Port device team_slave_0 added
[   62.072537][ T7267] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.086019][ T7276] team0: Port device team_slave_1 added
[   62.119922][ T7268] device hsr_slave_0 entered promiscuous mode
[   62.167597][ T7268] device hsr_slave_1 entered promiscuous mode
[   62.207228][ T7268] debugfs: Directory 'hsr0' with parent '/' already present!
15:51:02 executing program 0:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

15:51:02 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

[   62.330124][ T7276] device hsr_slave_0 entered promiscuous mode
[   62.357651][ T7276] device hsr_slave_1 entered promiscuous mode
[   62.411029][ T7276] debugfs: Directory 'hsr0' with parent '/' already present!
[   62.433801][ T7267] 8021q: adding VLAN 0 to HW filter on device team0
[   62.464224][ T7265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.476169][ T7265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.544665][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.553335][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.562443][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.571001][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.578096][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.590337][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0
[   62.604082][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   62.612239][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   62.621760][   T12] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.630997][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.638123][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.655372][ T7267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   62.674201][ T7267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   62.698852][ T7295] chnl_net:caif_netlink_parms(): no params data found
[   62.722476][ T7268] 8021q: adding VLAN 0 to HW filter on device team0
[   62.731530][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   62.741491][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   62.750627][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   62.760777][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   62.769762][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   62.778618][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   62.787510][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   62.795836][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.804513][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   62.813102][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.821580][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.829338][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.837337][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   62.845814][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   62.874336][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.881911][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.889934][ T7295] device bridge_slave_0 entered promiscuous mode
[   62.897621][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.904675][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.912650][ T7295] device bridge_slave_1 entered promiscuous mode
[   62.931397][ T7276] 8021q: adding VLAN 0 to HW filter on device team0
[   62.938547][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   62.951162][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.959533][   T17] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.966588][   T17] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.974750][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   62.982488][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.990609][   T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.009199][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.021683][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.052756][ T7295] team0: Port device team_slave_0 added
[   63.059994][ T7295] team0: Port device team_slave_1 added
[   63.079213][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.087996][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.096519][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.103575][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.111669][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.121554][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.130681][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.139663][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.148477][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.155507][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.170103][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.186184][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.195362][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.204315][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.213321][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.222240][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.230852][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.239266][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.248343][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.310545][ T7295] device hsr_slave_0 entered promiscuous mode
[   63.347608][ T7295] device hsr_slave_1 entered promiscuous mode
[   63.387386][ T7295] debugfs: Directory 'hsr0' with parent '/' already present!
[   63.398006][ T7267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.417011][ T7268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.426659][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.436071][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.448134][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.456475][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.463664][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.471776][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.481241][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.490308][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.499038][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.508059][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.516712][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.525716][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   63.534244][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.542887][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   63.551500][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.560518][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   63.588459][ T7276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   63.600695][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.642996][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   63.654426][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0
[   63.694597][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.707746][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.729078][ T7295] 8021q: adding VLAN 0 to HW filter on device team0
[   63.751408][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.768978][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.791310][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.798465][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.822580][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.872585][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.894141][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.906083][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.913195][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.921727][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   63.931217][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   63.940687][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   63.949513][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   63.959161][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   63.968471][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   63.983499][ T7295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
15:51:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

15:51:04 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

[   64.043549][ T7295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.078673][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   64.101482][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   64.115572][ T7263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   64.135251][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.170822][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
15:51:04 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

15:51:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:04 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

15:51:04 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

15:51:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

15:51:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

15:51:04 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:04 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:04 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001e40)={0x14, 0x69, 0x109}, 0x14}}, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0)

15:51:04 executing program 4:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:04 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:04 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@gettfilter={0x24, 0x2c, 0x1}, 0x24}}, 0x0)

15:51:05 executing program 5:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x1, 0x5})

15:51:05 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:05 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:05 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

15:51:05 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:05 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:05 executing program 2:
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x40, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x3}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xcb}, @TCA_U32_FLAGS={0x8}]}}]}, 0x40}}, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x332, 0x0)

15:51:06 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

15:51:06 executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:06 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00')
sendfile(r1, r2, 0x0, 0xb1)

15:51:06 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

15:51:06 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r3, &(0x7f00000001c0)=""/11, 0x567)

15:51:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100))

15:51:06 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

[   66.640149][    C1] hrtimer: interrupt took 44991 ns
[   66.702406][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
15:51:06 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100))

15:51:06 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

[   66.802933][   T25] kauditd_printk_skb: 7 callbacks suppressed
[   66.802962][   T25] audit: type=1800 audit(1570809066.841:31): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16579 res=0
[   66.909715][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   66.936713][   T25] audit: type=1800 audit(1570809066.991:32): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16579 res=0
15:51:07 executing program 5:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

15:51:07 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100))

15:51:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:07 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:07 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000200)={{0x6, @rose}, [@netrom, @rose, @default, @netrom, @rose, @rose, @rose, @null]}, 0x48)
sendto$netrom(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={{0x6, @rose}, [@bcast, @bcast, @netrom, @remote, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose, @netrom, @netrom]}, 0x48)

[   67.260666][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   67.288104][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[   67.377374][   T25] audit: type=1800 audit(1570809067.431:33): pid=7494 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16585 res=0
[   67.505493][   T25] audit: type=1800 audit(1570809067.561:34): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16584 res=0
15:51:08 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r3, &(0x7f00000001c0)=""/11, 0x567)

15:51:08 executing program 2:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='events\x00\x00\x00\xc7\xaa\xff\x0f\xb0\xc7\x9b\x93\x91\xe4\xaedY\xd8\x00\x00\x00\x00\x00', 0xf0, 0x0)
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000100))

15:51:08 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:08 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

[   68.152257][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
[   68.179743][ T7494] syz-executor.4 (7494) used greatest stack depth: 9232 bytes left
[   68.197404][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
15:51:08 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r3, &(0x7f00000001c0)=""/11, 0x567)

[   68.237157][   T25] audit: type=1800 audit(1570809068.291:35): pid=7516 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16596 res=0
[   68.272236][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   68.365970][   T25] audit: type=1800 audit(1570809068.301:36): pid=7511 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16597 res=0
[   68.524963][   T25] audit: type=1800 audit(1570809068.371:37): pid=7513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16598 res=0
[   68.597644][ T7524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[   68.702195][   T25] audit: type=1800 audit(1570809068.741:38): pid=7524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16583 res=0
15:51:09 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

15:51:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

[   69.153023][ T7513] syz-executor.0 (7513) used greatest stack depth: 9168 bytes left
15:51:09 executing program 3:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r3, &(0x7f00000001c0)=""/11, 0x567)

[   69.424644][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[   69.470514][ T7532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'.
15:51:09 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

[   69.528661][   T25] audit: type=1800 audit(1570809069.591:39): pid=7533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16567 res=0
[   69.558759][   T25] audit: type=1800 audit(1570809069.591:40): pid=7532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16592 res=0
15:51:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

[   70.291906][ T7551] ==================================================================
[   70.300132][ T7551] BUG: KCSAN: data-race in ext4_es_lookup_extent / ext4_es_lookup_extent
[   70.308529][ T7551] 
[   70.310944][ T7551] read to 0xffff888129c8c428 of 8 bytes by task 7546 on cpu 0:
[   70.318485][ T7551]  ext4_es_lookup_extent+0x3ba/0x510
[   70.323760][ T7551]  ext4_map_blocks+0xc2/0xf70
[   70.328432][ T7551]  _ext4_get_block+0x12d/0x2b0
[   70.333184][ T7551]  ext4_dio_get_block+0x9f/0xb0
15:51:10 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
getdents64(r3, &(0x7f00000001c0)=""/11, 0x567)

[   70.338026][ T7551]  do_direct_IO+0x1409/0x59b0
[   70.342693][ T7551]  do_blockdev_direct_IO+0x6b7/0x4cc0
[   70.348053][ T7551]  __blockdev_direct_IO+0x86/0xa0
[   70.353073][ T7551]  ext4_direct_IO+0x32f/0xf70
[   70.357761][ T7551]  generic_file_read_iter+0x1b0/0x1440
[   70.363214][ T7551]  ext4_file_read_iter+0xfa/0x240
[   70.368230][ T7551]  generic_file_splice_read+0x35c/0x500
[   70.373773][ T7551]  do_splice_to+0xf2/0x130
[   70.378187][ T7551]  splice_direct_to_actor+0x1a1/0x510
[   70.383560][ T7551]  do_splice_direct+0x161/0x1e0
[   70.388397][ T7551] 
15:51:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x10, 0xfe2c309bccc9f0cd, 0x0, 0x0, {0x0, r4, {}, {0x0, 0xffff}}}, 0x24}}, 0x0)
connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r4}, 0x10)
sendto(r1, &(0x7f0000000080)="54f1eb9d1b2982c57f10b2b58abfba1d80093a6aaf98f7ce0510f1b919ebbb8ce9a760ace27eaf03d6c0", 0x2a, 0x40, &(0x7f0000000140)=@pptp={0x18, 0x2, {0x1, @empty}}, 0x3b1)
fallocate(r0, 0x0, 0x0, 0x4003ff)
r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1000000000004006, 0x0)
sendfile(r5, r5, 0x0, 0x8800000)

[   70.390723][ T7551] write to 0xffff888129c8c428 of 8 bytes by task 7551 on cpu 1:
[   70.398350][ T7551]  ext4_es_lookup_extent+0x3d3/0x510
[   70.403626][ T7551]  ext4_map_blocks+0xc2/0xf70
[   70.408296][ T7551]  _ext4_get_block+0x12d/0x2b0
[   70.413050][ T7551]  ext4_dio_get_block+0x9f/0xb0
[   70.417892][ T7551]  do_direct_IO+0x1409/0x59b0
[   70.422568][ T7551]  do_blockdev_direct_IO+0x6b7/0x4cc0
[   70.427933][ T7551]  __blockdev_direct_IO+0x86/0xa0
[   70.432946][ T7551]  ext4_direct_IO+0x32f/0xf70
[   70.437619][ T7551]  generic_file_read_iter+0x1b0/0x1440
[   70.443077][ T7551]  ext4_file_read_iter+0xfa/0x240
[   70.448103][ T7551]  generic_file_splice_read+0x35c/0x500
[   70.453645][ T7551]  do_splice_to+0xf2/0x130
[   70.458060][ T7551]  splice_direct_to_actor+0x1a1/0x510
[   70.463415][ T7551] 
[   70.465729][ T7551] Reported by Kernel Concurrency Sanitizer on:
[   70.471877][ T7551] CPU: 1 PID: 7551 Comm: syz-executor.1 Not tainted 5.3.0+ #0
[   70.479317][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   70.489353][ T7551] ==================================================================
[   70.497394][ T7551] Kernel panic - not syncing: panic_on_warn set ...
[   70.503980][ T7551] CPU: 1 PID: 7551 Comm: syz-executor.1 Not tainted 5.3.0+ #0
[   70.511422][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   70.521458][ T7551] Call Trace:
[   70.524740][ T7551]  dump_stack+0xf5/0x159
[   70.528973][ T7551]  panic+0x209/0x639
[   70.532856][ T7551]  ? generic_file_read_iter+0x1b0/0x1440
[   70.538491][ T7551]  ? vprintk_func+0x8d/0x140
[   70.543071][ T7551]  kcsan_report.cold+0xc/0x1b
[   70.547737][ T7551]  __kcsan_setup_watchpoint+0x3ee/0x510
[   70.553267][ T7551]  ? __tsan_read8+0x2c/0x30
[   70.557756][ T7551]  __tsan_write8+0x32/0x40
[   70.562160][ T7551]  ext4_es_lookup_extent+0x3d3/0x510
[   70.567435][ T7551]  ext4_map_blocks+0xc2/0xf70
[   70.572096][ T7551]  ? __kcsan_setup_watchpoint+0x96/0x510
[   70.577715][ T7551]  ? __tsan_write8+0x32/0x40
[   70.582291][ T7551]  _ext4_get_block+0x12d/0x2b0
[   70.587046][ T7551]  ext4_dio_get_block+0x9f/0xb0
[   70.591887][ T7551]  do_direct_IO+0x1409/0x59b0
[   70.596558][ T7551]  ? __kcsan_setup_watchpoint+0x96/0x510
[   70.602178][ T7551]  ? __sanitizer_cov_trace_switch+0x49/0x80
[   70.608062][ T7551]  ? __kcsan_setup_watchpoint+0x96/0x510
[   70.613679][ T7551]  ? __tsan_read8+0x2c/0x30
[   70.618181][ T7551]  do_blockdev_direct_IO+0x6b7/0x4cc0
[   70.623543][ T7551]  ? __tsan_write8+0x32/0x40
[   70.628116][ T7551]  ? __ext4_journal_stop+0xc0/0x150
[   70.633301][ T7551]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[   70.639532][ T7551]  ? 0xffffffff81000000
[   70.643685][ T7551]  ? ext4_dio_get_block_unwritten_sync+0xc0/0xc0
[   70.650002][ T7551]  ? __kcsan_setup_watchpoint+0x6c/0x510
[   70.655623][ T7551]  ? ext4_dio_get_block_unwritten_sync+0xc0/0xc0
[   70.661935][ T7551]  __blockdev_direct_IO+0x86/0xa0
[   70.666950][ T7551]  ext4_direct_IO+0x32f/0xf70
[   70.671612][ T7551]  ? __tsan_read8+0x2c/0x30
[   70.676100][ T7551]  ? __sanitizer_cov_trace_cmp8+0x18/0x20
[   70.681808][ T7551]  ? atime_needs_update+0x2f3/0x360
[   70.687008][ T7551]  generic_file_read_iter+0x1b0/0x1440
[   70.692467][ T7551]  ? aa_file_perm+0x1f1/0x8a0
[   70.697130][ T7551]  ? __kcsan_setup_watchpoint+0x96/0x510
[   70.702749][ T7551]  ? __kcsan_setup_watchpoint+0x96/0x510
[   70.708390][ T7551]  ext4_file_read_iter+0xfa/0x240
[   70.713414][ T7551]  generic_file_splice_read+0x35c/0x500
[   70.718956][ T7551]  do_splice_to+0xf2/0x130
[   70.723367][ T7551]  ? add_to_pipe+0x1a0/0x1a0
[   70.727944][ T7551]  ? add_to_pipe+0x1a0/0x1a0
[   70.732534][ T7551]  splice_direct_to_actor+0x1a1/0x510
[   70.737891][ T7551]  ? generic_pipe_buf_nosteal+0x20/0x20
[   70.743428][ T7551]  do_splice_direct+0x161/0x1e0
[   70.748274][ T7551]  do_sendfile+0x384/0x7f0
[   70.752690][ T7551]  __x64_sys_sendfile64+0x12a/0x140
[   70.757878][ T7551]  do_syscall_64+0xcf/0x2f0
[   70.762376][ T7551]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[   70.768250][ T7551] RIP: 0033:0x459a59
[   70.772137][ T7551] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[   70.791724][ T7551] RSP: 002b:00007fa092790c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   70.800122][ T7551] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000459a59
[   70.808092][ T7551] RDX: 0000000000000000 RSI: 000000000000000a RDI: 000000000000000a
[   70.816046][ T7551] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[   70.824001][ T7551] R10: 0000000008800000 R11: 0000000000000246 R12: 00007fa0927916d4
[   70.831957][ T7551] R13: 00000000004c748b R14: 00000000004dd038 R15: 00000000ffffffff
[   70.841183][ T7551] Kernel Offset: disabled
[   70.845511][ T7551] Rebooting in 86400 seconds..