Starting mcstransd: 
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context mai[   40.047271] audit: type=1800 audit(1570138503.176:33): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
ntaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting O[   40.076089] audit: type=1800 audit(1570138503.176:34): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0
penBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   43.759172] audit: type=1400 audit(1570138506.886:35): avc:  denied  { map } for  pid=7603 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
Warning: Permanently added '10.128.1.12' (ECDSA) to the list of known hosts.
2019/10/03 21:35:13 fuzzer started
[   50.263209] audit: type=1400 audit(1570138513.386:36): avc:  denied  { map } for  pid=7612 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
2019/10/03 21:35:14 dialing manager at 10.128.0.105:33937
2019/10/03 21:35:14 syscalls: 2516
2019/10/03 21:35:14 code coverage: enabled
2019/10/03 21:35:14 comparison tracing: enabled
2019/10/03 21:35:14 extra coverage: extra coverage is not supported by the kernel
2019/10/03 21:35:14 setuid sandbox: enabled
2019/10/03 21:35:14 namespace sandbox: enabled
2019/10/03 21:35:14 Android sandbox: /sys/fs/selinux/policy does not exist
2019/10/03 21:35:14 fault injection: enabled
2019/10/03 21:35:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/10/03 21:35:14 net packet injection: enabled
2019/10/03 21:35:14 net device setup: enabled
21:37:41 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./bus\x00')

[  198.118032] audit: type=1400 audit(1570138661.246:37): avc:  denied  { map } for  pid=7629 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=76 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  198.237658] IPVS: ftp: loaded support on port[0] = 21
21:37:41 executing program 1:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x0, 0x73)
sendmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x2, {0xa, 0x0, 0x9041, @rand_addr="6772c87ed7c8245e03ee08efda56be68", 0x3ff}}}, 0xae, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x0, 0x7}], 0x10}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10, r0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101, 0x0)
clock_gettime(0x0, &(0x7f0000000000))

[  198.380682] chnl_net:caif_netlink_parms(): no params data found
[  198.451829] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.459354] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.467182] device bridge_slave_0 entered promiscuous mode
[  198.475669] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.482139] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.489666] device bridge_slave_1 entered promiscuous mode
21:37:41 executing program 2:
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
listen(r0, 0x10001)
r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0xe803, @loopback}], 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)

[  198.511757] IPVS: ftp: loaded support on port[0] = 21
[  198.521185] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  198.536225] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  198.590423] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  198.615005] team0: Port device team_slave_0 added
[  198.622396] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  198.644886] team0: Port device team_slave_1 added
[  198.666824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  198.674849] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  198.699010] IPVS: ftp: loaded support on port[0] = 21
21:37:41 executing program 3:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x1024, 0x0, 0x0, 0x0, 0x3, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r1, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0)
r2 = socket$kcm(0x11, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0x101, "2b04ec665b4b", 0xfc}, 0x80, 0x0}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={0xffffffffffffffff, 0xc, 0x1, 0xd8, 0x0, 0xffffffffffffffe4}, 0xfe00)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffffcf)
socket$kcm(0xa, 0x6, 0x0)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000240))
sendmsg(r2, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08)
socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffece}, 0x28)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000000)='ip6gre0\x00')
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x107, &(0x7f0000000700)=ANY=[], &(0x7f0000000280)='\x9e\x00\x00\x00\xff\x96{\xff\x00\x00\x00', 0xa8f, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0xe, r3, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0xfffffe67, 0x10, &(0x7f00000000c0)={0x1, 0xe, 0x80, 0x4}, 0x10}, 0xffffffffffffff61)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000500)={0xffffffffffffffff, r6})
socketpair(0x0, 0x0, 0x0, 0x0)

[  198.747792] device hsr_slave_0 entered promiscuous mode
[  198.784364] device hsr_slave_1 entered promiscuous mode
[  198.835617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  198.842733] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
21:37:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0x16, 0x0, 0x0)

[  198.911458] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.918029] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.925042] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.931421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.934458] IPVS: ftp: loaded support on port[0] = 21
[  199.022677] chnl_net:caif_netlink_parms(): no params data found
[  199.116784] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.123235] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.131353] device bridge_slave_0 entered promiscuous mode
[  199.163434] IPVS: ftp: loaded support on port[0] = 21
[  199.190000] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.202106] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.211898] device bridge_slave_1 entered promiscuous mode
[  199.232783] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
21:37:42 executing program 5:
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mount(&(0x7f0000000180)=@md0='\\dev/md0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ceph\x00', 0x0, 0x0)

[  199.242227] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.277889] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  199.289059] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  199.340933] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  199.372666] chnl_net:caif_netlink_parms(): no params data found
[  199.402192] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  199.411911] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.429399] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.437964] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  199.449796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  199.456453] 8021q: adding VLAN 0 to HW filter on device team0
[  199.477958] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  199.487193] team0: Port device team_slave_0 added
[  199.493099] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  199.500519] team0: Port device team_slave_1 added
[  199.513830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  199.535843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  199.544760] IPVS: ftp: loaded support on port[0] = 21
[  199.561431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  199.569644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  199.577640] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.584175] bridge0: port 1(bridge_slave_0) entered forwarding state
[  199.599298] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  199.608991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  199.637420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  199.645804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  199.653595] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.660022] bridge0: port 2(bridge_slave_1) entered forwarding state
[  199.677212] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  199.747436] device hsr_slave_0 entered promiscuous mode
[  199.784589] device hsr_slave_1 entered promiscuous mode
[  199.835010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  199.842467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  199.850814] bridge0: port 1(bridge_slave_0) entered blocking state
[  199.857514] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.864892] device bridge_slave_0 entered promiscuous mode
[  199.878431] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  199.885958] chnl_net:caif_netlink_parms(): no params data found
[  199.903878] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  199.912190] bridge0: port 2(bridge_slave_1) entered blocking state
[  199.919997] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.927477] device bridge_slave_1 entered promiscuous mode
[  199.943074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  199.990401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  200.038169] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.046495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.054446] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  200.061665] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.068851] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.077804] device bridge_slave_0 entered promiscuous mode
[  200.086258] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  200.093971] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.100534] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.108645] device bridge_slave_1 entered promiscuous mode
[  200.119982] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  200.128138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  200.157802] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  200.175513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.183437] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.193678] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  200.222541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  200.232914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  200.242156] chnl_net:caif_netlink_parms(): no params data found
[  200.258547] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  200.266371] team0: Port device team_slave_0 added
[  200.273286] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  200.284455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  200.318368] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  200.326344] team0: Port device team_slave_1 added
[  200.335123] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  200.344523] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  200.352496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  200.364358] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  200.370641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  200.389720] chnl_net:caif_netlink_parms(): no params data found
[  200.399246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  200.432797] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  200.447983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  200.456383] team0: Port device team_slave_0 added
[  200.463298] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  200.470947] team0: Port device team_slave_1 added
[  200.479942] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  200.511474] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.518387] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.525726] device bridge_slave_0 entered promiscuous mode
[  200.532865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  200.596135] device hsr_slave_0 entered promiscuous mode
[  200.634489] device hsr_slave_1 entered promiscuous mode
[  200.675947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  200.683281] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  200.690565] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.697247] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.705067] device bridge_slave_1 entered promiscuous mode
[  200.731886] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  200.796527] device hsr_slave_0 entered promiscuous mode
[  200.834561] device hsr_slave_1 entered promiscuous mode
[  200.875164] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  200.882838] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  200.898125] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  200.917153] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.923794] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.931691] device bridge_slave_0 entered promiscuous mode
[  200.940594] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.947091] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.954457] device bridge_slave_1 entered promiscuous mode
[  200.963494] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  200.975609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.999331] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  201.023206] audit: type=1400 audit(1570138664.146:38): avc:  denied  { associate } for  pid=7630 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[  201.068655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  201.087713] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  201.101755] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
21:37:44 executing program 0:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={[], [], @remote}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x40000000000019c, 0x0)

[  201.122061] team0: Port device team_slave_0 added
[  201.137985] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  201.166332] team0: Port device team_slave_1 added
[  201.202525] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.213950] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  201.241093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  201.257809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  201.292123] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
21:37:44 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)
fcntl$setlease(0xffffffffffffffff, 0x400, 0x0)

[  201.301998] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  201.317680] team0: Port device team_slave_0 added
[  201.323973] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  201.339889] team0: Port device team_slave_1 added
[  201.351037] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.361050] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  201.381415] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  201.392586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.400195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.446223] device hsr_slave_0 entered promiscuous mode
[  201.484570] device hsr_slave_1 entered promiscuous mode
[  201.525261] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  201.534526] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  201.543216] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  201.555508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  201.561857] 8021q: adding VLAN 0 to HW filter on device team0
[  201.570157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  201.577967] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  201.585729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  201.607473] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  201.613693] 8021q: adding VLAN 0 to HW filter on device team0
21:37:44 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x160)
fallocate(r3, 0x0, 0x0, 0x2000002)
read$eventfd(r3, &(0x7f00000003c0), 0x8)
poll(&(0x7f0000000300)=[{r2, 0x20}, {r2, 0x400}, {r2, 0x4000}, {r2, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r2, 0x200}, {r0, 0x100}], 0x8, 0x9)
fallocate(r1, 0x800000000000002, 0x6, 0xffffffff)
r4 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1)
r5 = socket$inet6(0xa, 0x400000000001, 0x0)
accept4(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000)
r6 = dup(r5)
setsockopt$inet6_tcp_int(r6, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
fcntl$dupfd(r8, 0x0, r7)
sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r9 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
r10 = getegid()
setgid(r10)
ftruncate(r4, 0x800fe)
getpid()
sendfile(r6, r9, 0x0, 0x8000fffffffe)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0xffffffffffffffec)

[  201.625191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  201.634537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  201.642380] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  201.658174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.667401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.675507] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.681877] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.693537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  201.697820] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  201.704642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  201.726683] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.733071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.746195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.753429] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  201.760751] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  201.784048] hrtimer: interrupt took 55902 ns
[  201.793058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  201.803337] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  201.828693] 8021q: adding VLAN 0 to HW filter on device bond0
[  201.848183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.860247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.871422] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.877858] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.890474] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  201.898820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  201.912219] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.919344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.987413] device hsr_slave_0 entered promiscuous mode
[  202.014501] device hsr_slave_1 entered promiscuous mode
[  202.057506] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  202.072727] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  202.083311] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  202.092129] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  202.102798] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  202.112896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  202.127059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.139392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.151906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  202.172205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  202.190699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
21:37:45 executing program 0:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x0)

[  202.203449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.226757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  202.245696] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  202.265906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  202.274399] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  202.287592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.299783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.308941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.316323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.323282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.331886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.344796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  202.353747] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  202.360329] 8021q: adding VLAN 0 to HW filter on device team0
[  202.377178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  202.385604] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.393444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.403497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.411803] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.420192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.428117] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.437242] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  202.449126] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  202.461287] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  202.469594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
21:37:45 executing program 0:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

[  202.478251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.486432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.494423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.501988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.509873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  202.524989] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  202.552040] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  202.559643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.570376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  202.589598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.601351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.610308] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.616747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.623783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  202.632843] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.640621] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.646990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.653949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.662523] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  202.676307] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.683234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  202.691397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  202.699145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  202.706823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.721911] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  202.730432] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  202.736825] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  202.746099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  202.755250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.765919] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  202.775708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  202.785584] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  202.791707] 8021q: adding VLAN 0 to HW filter on device team0
[  202.800236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.807450] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.821232] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.834175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  202.843290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
21:37:46 executing program 0:
r0 = socket$kcm(0xa, 0x2, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1}, 0x3d, 0x0}, 0x0)

[  202.853616] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  202.872252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.888239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.896466] bridge0: port 1(bridge_slave_0) entered blocking state
21:37:46 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)

[  202.902941] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.930021] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.943391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.951824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.959454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  202.972980] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.981423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  203.012896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  203.021576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.034597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.046861] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.053267] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.060361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.069521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.088166] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  203.107257] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  203.118680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  203.130823] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.142322] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.153339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.163618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.175011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  203.182763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.193848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  203.206558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  203.214212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.230850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.241942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
21:37:46 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000)
memfd_create(&(0x7f0000000540)='\x00', 0x17)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0)
creat(0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2b696f202d637075202b63707520d372646d61202d696f202b63040020"], 0x1d)
r3 = dup(r2)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, 0x0, 0x0)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x800fe)
sendfile(r3, r5, 0x0, 0x8000fffffffe)

[  203.270450] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.287246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  203.298562] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  203.311283] 8021q: adding VLAN 0 to HW filter on device team0
[  203.319800] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  203.332411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.337442] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  203.359530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.374769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.392396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.413322] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  203.428179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  203.443144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  203.451940] audit: type=1400 audit(1570138666.556:39): avc:  denied  { mac_admin } for  pid=7696 comm="syz-executor.1" capability=33  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
[  203.489068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.508646] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.531902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.542536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.585830] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.592263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.619492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
21:37:46 executing program 0:
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000180)=':\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x22, &(0x7f0000000040)=r0, 0x10)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)

[  203.632651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  203.648740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.669342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.680319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  203.689358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.704480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.712848] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.725916] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.732422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.751945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  203.761445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  203.774445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.782084] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.790188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.801367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  203.808430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.820428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  203.852297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.871567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  203.890787] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  203.903090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.916917] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.928001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  203.940187] audit: type=1400 audit(1570138667.066:40): avc:  denied  { create } for  pid=7716 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  203.943708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.972505] audit: type=1400 audit(1570138667.096:41): avc:  denied  { write } for  pid=7716 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  203.998250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.006950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.015415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.026181] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  204.053033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.063385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.072348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  204.084767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.095484] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  204.102219] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.120193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.127955] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
21:37:47 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5)
openat$cgroup_ro(r1, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x160)
fallocate(r2, 0x0, 0x0, 0x2000002)
read$eventfd(r2, &(0x7f00000003c0), 0x8)
poll(0x0, 0x0, 0x0)
fallocate(r0, 0x800000000000002, 0x6, 0xffffffff)
r3 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
accept4(r3, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000)
r5 = dup(r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
fcntl$dupfd(r7, 0x0, r6)
fgetxattr(r6, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)=""/60, 0x3c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
r9 = getegid()
setgid(r9)
ftruncate(r3, 0x800fe)
getpid()
sendfile(r5, r8, 0x0, 0x8000fffffffe)

[  204.150689] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  204.171683] 8021q: adding VLAN 0 to HW filter on device batadv0
21:37:47 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x5e831, 0xffffffffffffffff, 0x0)

[  204.273277] ceph: device name is missing path (no : separator in \dev/md0)
[  204.283718] ceph: device name is missing path (no : separator in \dev/md0)
21:37:47 executing program 5:
perf_event_open(&(0x7f0000001980)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0)

21:37:47 executing program 2:
r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5)
r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0)
r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002)
read$eventfd(r4, &(0x7f00000003c0), 0x8)
poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {r3, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9)
fallocate(r1, 0x800000000000002, 0x6, 0xffffffff)
r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1)
r6 = socket$inet6(0xa, 0x400000000001, 0x0)
accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000)
r7 = dup(r6)
setsockopt$inet6_tcp_int(r7, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
fcntl$dupfd(r9, 0x0, r8)
fgetxattr(r8, &(0x7f0000000080)=@known='trusted.overlay.redirect\x00', &(0x7f0000000140)=""/60, 0x3c)
sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
r11 = getegid()
setgid(r11)
ftruncate(r5, 0x800fe)
getpid()
sendfile(r7, r10, 0x0, 0x8000fffffffe)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0xffffffffffffffec)

21:37:47 executing program 0:
perf_event_open(&(0x7f0000001980)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev\x00', 0x49a881, 0x0)

21:37:47 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000840)='/dev/snd/timer\x00', 0x0, 0x10000)
memfd_create(&(0x7f0000000540)='\x00', 0x17)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='Cpuacct.stE\xae\x00', 0x275a, 0x0)
creat(0x0, 0x0)
read$eventfd(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000180)='./bus\x00', 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = socket$inet6(0xa, 0x400000000001, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="2b696f202d637075202b63707520d372646d61202d696f202b63040020"], 0x1d)
r3 = dup(r2)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', 0x0, 0x0, 0x0)
r4 = add_key$keyring(&(0x7f0000000300)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r4, 0x0, 0x0)
r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0x800fe)
sendfile(r3, r5, 0x0, 0x8000fffffffe)

[  204.318636] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
[  204.401352] audit: type=1400 audit(1570138667.526:42): avc:  denied  { map } for  pid=7733 comm="syz-executor.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27589 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1
[  204.411070] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
21:37:47 executing program 5:
r0 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="53000000c659ca807737f4000002000000009600000000007fffffffefff00000000000048953a6872807a383e57fdc5f539c0e3aadb2ef49a20ae49ffdfe5938290081837f5e8aa04e5505a59d9c8e81d9e875e79faa777", 0x58}], 0x1)
poll(&(0x7f0000000100)=[{r0, 0x647}], 0x1, 0x0)

21:37:47 executing program 0:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c91300", 0x1e}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="2400000058001f03ff07f4f9002304000a04f511080001", 0x17)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)

21:37:48 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
munlockall()

[  204.895524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
21:37:48 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="ff03a50d5e0100e47bf070")
getgid()
lsetxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x3)
r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/if_inet6\x00')
r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r5 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
sendfile(r4, r5, 0x0, 0x20000000010000)
ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000100)=""/176)
r6 = creat(0x0, 0x0)
io_setup(0xac0, &(0x7f00000001c0)=<r7=>0x0)
r8 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r9 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r8, &(0x7f0000001400)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb96951d6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b855c4e70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc5a472475d3ae545ca1fcf7628b873e31ba83a98a7ad5b0cfbe9711b517a9a1388ad0efa2a3b4e22152021d631b731e2e100a9831111db7acce948bb5deeea260463c140ac929e77c58402776caf85d4569a75dde2f64c4491508afb541ed9b2c81fc95c06706235f383e31cf662c95b1e49cfd94871e22720a41535756e419b271276941692bd023dd9c9dbec4f7db1e5c00d8b3be7b8e826a6aadd001edd0dfeb00f8048442b5c48456fd642e629dcb2ff55592665ff491cd832672ce4d999da186db2c3a1f8b6b1f7d3750d7cdb3097954e6e14fb2183ad662c63d4ce8b82dc2487f0fe2ea2827b53a7c6dcced878d2fb29c1d3ff583570e7bc172d1a5c716e0447cb08ce3c468ffdf975da372f3f3eb455aaf5822bc04a51b6cad24a2331369df81c123b009a2381b42e9aeb077f621608d81c12a5f5c6c295d74afd4dd5c051296be0b54c70bf899b347c36bff62f313079983409d7f9cf1242c917985c1b5d0736fe21f8514f63d0369a374c42da40bd5140bc3e602d00c3cb4f8e621863ab47422778d67d72de34753fd72cef80649a1548e4e8dcbcffe4054cc9d8a1f922623a75904cbdaacde768131e587269a4a99d82f7009c1b8ab79aa232a2fd45ad71b603803123f6ba979fa6a87525884b08d721a21400fb1f950b96ead82f408cc4388d3b78fb456616429a520656d5e5a876fd04748498902c86f58d45f4c1b3919eb846a00edf07e7a830bf723e4774f085f15534dd3b5246c0c0970b5ad7bb39b30b156a9430378c5b0aab1261c78d72ac301cd552d5e8dd4b642ec1dc0672745d593bb26d095b5b23576e3cfd6ab580f6e09419d0f0c64250fafaa3759aa1888da48d89c3f7c9454b0b3d0ab40445f5bed4493ef43ab08f31b1345ac4ffd94ad79c9eee53904ed6f572817153190d2e6863f2e39356bb99926419fd314341a536b7e76cae60bf7750a4c29e3f4c7f005530b1d4ee0e25b93b76fcc1108222f0b00de52cf4100e97adfd7b9db1370586ba27e1e183299be00d0df8439c380edf2f79deb441eac59b814b04accdff5e17f02046139f91f0332661676ff506e575f0cb2850bcc9f8666f6d1f69f8f4271cb804a79fccd7016f049d1a494c26a527c437fa0be6d51ec7543d9bd7a2f016194ebe3c99080a6c9b5119863dfe865f8e60cae29f50b67dbfaa0a3c9794d73034485ca1613344c572783db3dfab01b28089c51cda99cefa4c1c881a29e229f04c7e0fd04dc425ae8417852e6e31520c6207e9d4e35285feef2a2cb8a3bceb08a166fa4284a516362621e2c06731a442791f1db063a32cf1f005c914102c7273cb4d7ab1bf567d72f230783d2ea99c43a60e8729132441ee6c5362c33f9b613f84417c3c5549f4e3d9e73c6f83f16c8e57ae22fe5f54515e111fe43ad7c400d214281452bb6141cecad84b23a695f061988d906d03be5d89584634b9e9d9a9b072f8e7cbb47c47719318a2001cafa665dd2c82672d16877ea115bd023fc1975f7c59664bfb06f66a1a5e3f05cb283fb45ea67a2727ee6e10bf35b31fdd03d43ec67b753f6737e0d2f4a5275031595878cefc8f0ca", 0x600)
sendfile(r8, r9, 0x0, 0x10000)
r10 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r11 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r4, &(0x7f0000001400)="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", 0x600)
sendfile(r10, r11, 0x0, 0x10000)
r12 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0)
r13 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0)
write$9p(r12, &(0x7f0000001400)="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", 0x600)
sendfile(r12, r13, 0x0, 0x10000)
r14 = dup(0xffffffffffffffff)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r14, 0x6, 0x14, &(0x7f0000000040), 0x4)
r15 = socket$bt_hidp(0x1f, 0x3, 0x6)
io_submit(r7, 0x394, &(0x7f0000000780)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x6, 0x1, r8, &(0x7f0000000280)="9682443938135c0d369c531d", 0xc, 0x3, 0x0, 0x0, r10}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xc50e82401a1f26c6, 0x1, r4, &(0x7f0000000400)="044b224181903130b61694e932334d780760a33e9293e4ba9590b47cd59eea972e7530", 0x23, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x3, 0x1, r12, &(0x7f0000000480), 0x0, 0x9a4}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0xdd0d7ef13e97e831, 0x1, 0xffffffffffffffff, &(0x7f0000000680)="1136223f87b7b40421f04736b8f4420a8f93b034ed60b84bf98b527639cd7f861e8df6f54572af5ee02dad52b60f", 0x2e, 0x4, 0x0, 0x3}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x400, r14, &(0x7f00000005c0)="ad88e06b195173480898eabfa69fa1163c2df39688c9b0ea440639c02b91403b13ee1671c8af2f3b7ada8f0eb92383ae591a0c185bcd648252", 0x39, 0x80000000, 0x0, 0x0, r6}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0xfffc, r15, &(0x7f0000000640)="7df3590dc8e3dc99e0d5731f042718deb90da2", 0x13, 0x2, 0x0, 0x3, r6}])
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0x40a85323, &(0x7f00000002c0)={{0xcb}, 'port1\x00', 0x10, 0x0, 0x1f, 0x4, 0x3, 0x2, 0x0, 0x0, 0x4, 0x8000})
fchmod(r3, 0x0)
getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000200)={@remote, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @local, 0x8, 0x100, 0x0, 0x0, 0x2, 0x1080050, r16})
gettid()

21:37:48 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

21:37:48 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x5e831, 0xffffffffffffffff, 0x0)

[  205.005953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pig=7756 comm=syz-executor.0
[  205.084232] audit: type=1804 audit(1570138668.206:43): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir311002595/syzkaller.rYOLjT/3/file0" dev="sda1" ino=16532 res=1
[  205.114501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pig=7756 comm=syz-executor.0
21:37:48 executing program 1:
clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000440)='de\xe7 ', 0x203)
write(r0, &(0x7f0000000000)="16", 0x1)
fcntl$addseals(r0, 0x409, 0x8)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f000086fff4))

21:37:48 executing program 0:
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0), 0xc)
r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x615, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r0)

21:37:48 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
write$binfmt_elf64(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000810000)={0x0, 0x1}, 0x8)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
shutdown(r0, 0x1)

[  205.258740] audit: type=1800 audit(1570138668.256:44): pid=7762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16532 res=0
[  205.418992] audit: type=1804 audit(1570138668.316:45): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir311002595/syzkaller.rYOLjT/3/file0" dev="sda1" ino=16532 res=1
[  205.513433] audit: type=1800 audit(1570138668.316:46): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16532 res=0
21:37:48 executing program 2:
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff})
getegid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r1=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$inet6(0xa, 0x400000000001, 0x0)

21:37:48 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clock_gettime(0xfffffffffffffffc, 0x0)

21:37:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x12c)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffd0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a000000000000d74619ed1307d89524429adc542c0200000012aac700"/56], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa000001001700410000"], 0x70}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r2, r3)

21:37:48 executing program 5:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
io_setup(0x9, &(0x7f0000000180)=<r0=>0x0)
io_destroy(r0)

[  205.759961] audit: type=1804 audit(1570138668.316:47): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir311002595/syzkaller.rYOLjT/3/file0" dev="sda1" ino=16532 res=1
21:37:48 executing program 3:
socket$inet6_dccp(0xa, 0x6, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x26, 0x400200007fe, &(0x7f00000000c0)={0x2, 0x10084e23, @local}, 0x10)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffff)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYPTR=&(0x7f00000005c0)=ANY=[@ANYPTR=&(0x7f00000004c0)=ANY=[@ANYRES16], @ANYRES32, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRESHEX, @ANYPTR64, @ANYRES32=0x0]], @ANYRESDEC, @ANYRES16], 0x120001644)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x7ffff012}], 0x1, &(0x7f0000000200)=""/20, 0xc2b, 0x3f00}, 0x300)

[  205.789150] audit: type=1800 audit(1570138668.316:48): pid=7770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.5" name="file0" dev="sda1" ino=16532 res=0
21:37:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000000)=@secondary='builtin_and_secondary_trusted\x00')

21:37:49 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0)
mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff)
read$FUSE(r0, &(0x7f00000020c0), 0xf18)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1e}}, 0x50)
read$FUSE(r0, &(0x7f00000030c0), 0xffffffd1)
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='./file0/file1\x00')
write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85eb}}}, 0x90)
read$FUSE(r0, &(0x7f0000000780), 0x1000)

21:37:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000000)=@secondary='builtin_and_secondary_trusted\x00')

21:37:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000000)=@secondary='builtin_and_secondary_trusted\x00')

21:37:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x12c)
openat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0x8)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffd0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="020a000007000000000020000000854105001a000000000000d74619ed1307d89524429adc542c0200000012aac700"/56], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000000200fd000005000500000000000a004872bbb6896209000055781309e339be593f7710aa000001001700410000"], 0x70}}, 0x0)
sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x0, 0x0)
dup2(r2, r3)

21:37:49 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000001000)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000080)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000000)=@secondary='builtin_and_secondary_trusted\x00')

21:37:49 executing program 5:
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3ea, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000700)=""/137}, 0x20)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)

21:37:49 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup3(r0, r1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000440)=ANY=[@ANYRESOCT])
dup2(r3, r2)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)

21:37:49 executing program 4:
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x90a0)
syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x5)
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x7, 0x20000, 0x154})

21:37:49 executing program 0:
unlink(0x0)
clone(0x1000109, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = memfd_create(&(0x7f0000000440)='de\xe7 ', 0x203)
ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x0, @empty}})
write(r0, &(0x7f0000000000)="160004", 0x3)
fcntl$addseals(r0, 0x409, 0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x10000)
socketpair$unix(0x1, 0x1, 0x0, 0x0)

21:37:49 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000301ff22000000000016000000000000bdc1abfb5bc6e95fe4e91a"], 0x14}}, 0x0)

21:37:49 executing program 3:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:50 executing program 1:
perf_event_open(&(0x7f0000001980)={0x2, 0x70, 0x5aeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)

21:37:50 executing program 0:
syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x0)
r0 = syz_open_dev$sg(0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={[], 0x0, 0x7, 0x20000})

21:37:50 executing program 4:
syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x640500, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x2761, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080), 0xfffffe38)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x660c, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00'})
openat$cgroup_ro(r1, &(0x7f0000000280)='C\a\x00\x00\x00\x00\x00\x00\x00tE\xae\x00', 0x275a, 0x0)
r2 = creat(&(0x7f0000000480)='./bus\x00', 0x80)
fallocate(r2, 0x0, 0x0, 0x2000002)
read$eventfd(r2, &(0x7f00000003c0), 0x8)
fallocate(r0, 0x800000000000002, 0x6, 0x2)
r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x12e)
r4 = socket$inet6(0xa, 0x400000000001, 0x0)
r5 = dup(r4)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
setsockopt$inet6_tcp_int(r5, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$security_selinux(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:lvm_control_t:s0\x00', 0x23, 0x0)
r6 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0)
ftruncate(r3, 0x800fe)
getpgid(0xffffffffffffffff)
accept4(r5, &(0x7f0000000540)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000400)=0x80, 0x800)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001980)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast1}}, {{@in6=@ipv4}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8)
getgid()
getpgrp(0x0)
stat(&(0x7f00000020c0)='./bus\x00', &(0x7f0000002100))
ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000002240))
gettid()
getgid()
sendfile(r5, r6, 0x0, 0x8000fffffffe)

21:37:50 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000100)=0x4)
r5 = dup3(r0, r1, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000100)=ANY=[])
dup2(r5, r4)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, 0x0, 0x4102, 0x0, {0xffffffffffffff49, 0x13, @l2={'eth', 0x3a, 'lo\x00'}}}}, 0x28}}, 0x0)

21:37:50 executing program 3:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:51 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

[  207.863346] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
21:37:51 executing program 0:
r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
r2 = socket$netlink(0x10, 0x3, 0xa)
sendfile(r2, r1, 0x0, 0x33fe0)
dup3(r2, r0, 0x0)
io_setup(0x40000000008, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}])

21:37:51 executing program 2:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xc71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000400))

21:37:51 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000280)="1c0000001a009b8a14000000ff00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000005080)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f0000001b00), 0x0, &(0x7f0000001b80)=""/226, 0xe2}, 0x80000000}, {{0x0, 0x0, &(0x7f0000002cc0)=[{&(0x7f0000001c80)=""/57, 0x39}, {&(0x7f0000001cc0)=""/4096, 0x1000}], 0x2}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002e00)=""/214, 0xd6}, {&(0x7f0000002f00)=""/121, 0x79}], 0x2}, 0x3}, {{0x0, 0x0, &(0x7f0000004880)=[{&(0x7f0000003380)=""/97, 0x61}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/195, 0xc3}, {&(0x7f0000004500)=""/239, 0xef}, {&(0x7f0000004600)=""/42, 0x2a}, {&(0x7f0000004640)=""/154, 0x9a}, {&(0x7f0000004700)=""/64, 0x40}, {&(0x7f0000004740)=""/177, 0xb1}, {0x0}], 0x9}}], 0x5, 0x2, 0x0)

21:37:51 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)

21:37:51 executing program 5:

21:37:51 executing program 4:

21:37:51 executing program 1:

21:37:51 executing program 5:

21:37:51 executing program 0:

21:37:51 executing program 2:

21:37:51 executing program 4:

21:37:51 executing program 3:

21:37:51 executing program 1:

21:37:51 executing program 0:

21:37:51 executing program 5:

21:37:51 executing program 4:

21:37:51 executing program 2:

21:37:51 executing program 1:

21:37:51 executing program 3:

21:37:51 executing program 0:

21:37:51 executing program 5:

21:37:51 executing program 2:

21:37:51 executing program 4:

21:37:51 executing program 1:

21:37:51 executing program 3:

21:37:51 executing program 0:

21:37:51 executing program 5:

21:37:51 executing program 2:

21:37:51 executing program 1:

21:37:52 executing program 4:

21:37:52 executing program 3:

21:37:52 executing program 0:

21:37:52 executing program 2:

21:37:52 executing program 5:

21:37:52 executing program 1:

21:37:52 executing program 4:

21:37:52 executing program 5:

21:37:52 executing program 0:

21:37:52 executing program 3:

21:37:52 executing program 2:

21:37:52 executing program 1:

21:37:52 executing program 4:

21:37:52 executing program 5:

21:37:52 executing program 0:

21:37:52 executing program 3:

21:37:52 executing program 1:

21:37:52 executing program 2:

21:37:52 executing program 4:

21:37:52 executing program 5:

21:37:52 executing program 2:

21:37:52 executing program 3:

21:37:52 executing program 0:

21:37:52 executing program 1:

21:37:52 executing program 4:

21:37:52 executing program 5:

21:37:52 executing program 3:

21:37:52 executing program 2:

21:37:52 executing program 0:

21:37:52 executing program 1:

21:37:52 executing program 4:

21:37:52 executing program 5:

21:37:52 executing program 2:

21:37:52 executing program 1:

21:37:52 executing program 3:

21:37:52 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101a06, 0x0)
io_setup(0x6, &(0x7f0000000140)=<r1=>0x0)
r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x0)
io_submit(r1, 0x4, &(0x7f0000000700)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x8, 0x6f6, r2, &(0x7f0000000280)="8103146666a267d9a2eeed2535b149a9e32d0d5eabdfab0057a9250cd9a1367bdc735a482a4bafd8412f6b7e8b62dc92028975de78ca962aa94ea155fd7e2303d856d2b0be9789e7066280509fe5a3b9b54e5a4e430cf85cf4630c16608210f2deb4019e1e8c41fd520a340ff1a1162aeb34d5daebcab34968d8ed60ea535cd5c457fbd128d0cb87c11fef4d40cce6875b1f06575c6909c5d32cf3aef6002584bf6c6efcd30682c254b5603e319f514481b2fcdceccd05deddc1678631f265c14b090e8d6ad01711ee07d19ef389de394dc87e3153", 0xd5, 0x68, 0x0, 0x2}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000400)="5a92e5ea942c8b13e2761d8a44fc67d87cbe1f3ba6116cb3778e24b2b5bcedc85be1f80c893f70a0c121bf484b4d9124f40dfd8793448c1000d716df1086c1e2daac01d6a64b7ca780fe399ee3301f7d2d685632922a51e3b900ddbefbcdd93bc91ed029432cbb69581bdf4afd5e542d351e0da286290d862e6a30d91cbaccf0af49643bd7d67307db50f99162efe1e4bed9ab947afc14ea7075463bbeda60fc16d642d7058fa64e6a90102f6438fe4aab71282b3b", 0xb5, 0x1, 0x0, 0x6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000640)="27dc2c5077f7eb10a381b33afce375463f8eead23efb3ad048ee76f76024f4c5ee69aa238341", 0x26, 0x7, 0x0, 0x2}])

21:37:52 executing program 0:
inotify_init1(0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
shutdown(r0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000280)=0x14)

21:37:53 executing program 2:

21:37:53 executing program 1:

21:37:53 executing program 3:

21:37:53 executing program 5:

21:37:53 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000000)=0x100005)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)

21:37:53 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @random="5c2ee2261fbc", [{}], {@ipv6={0x86dd, {0x0, 0x6, "88dc4f", 0x10, 0x0, 0x0, @remote, @mcast2, {[], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "96e266"}}}}}}}, &(0x7f0000000040)={0x0, 0x4, [0x0, 0x180000ceb]})

21:37:53 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10, r0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r4})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r4, 0xb}, 0x10)

21:37:53 executing program 5:
r0 = memfd_create(&(0x7f0000000400)='queue_id\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x10005812})
io_setup(0x2, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x350, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000340)="8d", 0x392}])
r4 = dup3(r1, r2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0)
ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000200)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_mtu=0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x0, 0x12, r0, 0x0)

21:37:53 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x800, 0x0, 0x103, 0x1}, 0x20)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x800, 0x0, 0x103}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
close(r1)

[  210.168458] kauditd_printk_skb: 12 callbacks suppressed
[  210.168472] audit: type=1400 audit(1570138673.266:61): avc:  denied  { map } for  pid=8051 comm="syz-executor.3" path="socket:[30280]" dev="sockfs" ino=30280 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1
21:37:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0)

21:37:53 executing program 4:
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000040))
fanotify_init(0x4, 0x0)
unshare(0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x1e, 0x80005, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'team0\x00\x00\x01\x00', 0x9843})
socket(0x840000000002, 0x3, 0xff)

[  210.353483] audit: type=1400 audit(1570138673.476:62): avc:  denied  { read } for  pid=8061 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  210.458797] audit: type=1400 audit(1570138673.516:63): avc:  denied  { map } for  pid=8061 comm="syz-executor.5" path=2F6D656D66643A71756575655F6964202864656C6574656429 dev="tmpfs" ino=30294 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
21:37:53 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
ioctl$KVM_GET_MSRS(r0, 0xc008ae1e, &(0x7f0000000140))

21:37:53 executing program 4:
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c91300", 0x1e}], 0x1}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)='$', 0x1)
sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0)

21:37:53 executing program 2:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
capget(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x0, 0x8e, 0x0, 0x0, 0x0, 0x91cd})

21:37:53 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

21:37:53 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x0, 0x7ffd, 0x8000)
fallocate(r1, 0x3, 0x0, 0xfff9)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

[  210.792977] audit: type=1400 audit(1570138673.916:64): avc:  denied  { map } for  pid=8061 comm="syz-executor.5" path="socket:[30306]" dev="sockfs" ino=30306 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  210.825045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  210.842685] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use)
21:37:54 executing program 4:
r0 = socket$kcm(0x10, 0x1000000000000002, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="230000005e0081aee4050c00000f00000000a30040ffffff9e8b1832e0b58bc609f6d8", 0x23}], 0x1}, 0x0)

21:37:54 executing program 5:
r0 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfffffd2c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.events\x00', 0x2da8020000100000, 0x500001c)

[  211.050181] audit: type=1804 audit(1570138674.176:65): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir311002595/syzkaller.rYOLjT/22/memory.events" dev="sda1" ino=16538 res=1
21:37:54 executing program 3:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10, r0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r4})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r4, 0xb}, 0x10)

21:37:54 executing program 0:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={0x0, 0xfffffffffffffd51}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x34c, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0x10)
r1 = dup2(r0, r0)
socket$inet6_udp(0xa, 0x2, 0x0)
write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000080), 0xa)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
setxattr(&(0x7f0000000300)='./file0\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='\x00', 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x142800)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0x37e1fb5c)
r3 = open(&(0x7f0000000140)='./file0\x00', 0x10000, 0x2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[]}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r4 = creat(0x0, 0x0)
ftruncate(r4, 0x8200)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r5, 0x0)
mremap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000005000/0x1000)=nil)
ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x8})
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0)

21:37:54 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={[], [], @loopback}}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="dde056b5586b298d486e9d3492cb929c7194fdde36b6d07589a605b8bc9cda93a1bb487d51014e14c8ba7fd7f27fd1b24fd4f48d3c57be111b40387bf8a01b717857ead2962216a645272bd082d3dbb0cd485e8d0970627862493988aa89211da69a9c72c9a47632cafc746ab70f4f9b8a7aacc6824ffe3ffaef9e705f208d6b4ae06c77", 0x84}, {&(0x7f0000000200)="aea52827e0eb642874bbbbc81b986be0c28af8ecde1288cbf5aae8f644503ad49efd6f15b366abc7bc08b810b43e13f54f56f3991ad9ab4a445e349a3bdfe0f27b1578bcc12f8b7665c8497393ed9c8d94d2fa7534bd720d2b482f78a52fd6c0e9f3123c4d536353efbbdc998140000bfbb39def8a372f4a020f8b97eb64185297364fece92984cbd78fae86ca02bdd0689c06d1cb99f50e2bbd37cd52eb3809853e8287ceeafc3a219e5aa3cdd88699d041438d0d4ab0825047442bb5ea02cbd4c212d8aabf44316d", 0xc9}, {&(0x7f0000000080)="413b0e36164ae94c9fcc1af82a7a448b45339e6c6949c70ddc61bf61dacc2e4006ec90fee6471c", 0x27}, {&(0x7f0000000300)="abd0ef11e7514f86f201b5efafc1b8aa6cc6fbdc02282294bf727b228ed26b478d6befd89906ada40668b8d2272bfc8154f70431a08a31b392dd04429277f49be5e5ce49568ff163d1db0550c34738a18aaa2b841cd95773393d3e041d5db034fd35ded7a7ce2911e16082a703a8d15ae172b72f42cd7bdde6561c921987258d070587af883f67befd0d880b4031cab4ab6fbfa1d636956fff43a5c20937fd3e6566d43262d2721831accf1617229d91281f2d5577fe29d6c8bcee1ad7e1ad490f82a0a502fcc43f47cd58d619ed0a3e32e4340041390b57d5632cc1e46f139ef5c90e", 0x493}, {&(0x7f0000000740)="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", 0xfa}], 0x5}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000008c0)="a7a31d719da5b8f79e133b1ecda18d1a89793879daab2055550cc8383242a3819e4d75a2d115994497f8ad817ce616f819327ea015a9d9474d34fc897f4370a7ddaaf74e3f9bdb588e562bb95e00ce8edbfa9a6e8ad861a6f7a1dcc2d496d6064c44fdfd0eb5cb3546fe0c60f6dfb459bb6bd213fe85bebba9acce6202738202f539c20d742de77c064823e5341861b06532397d56545e0a6d79a6897b7a41084243ba99c3a6223acf8f03c061a4bc6d4b92ca3c07f8a05c20016cfa9560618e4588fe4a022a0e883321a38977b0255e14d217c82581356108a5605c56a19738efdc6c7ef3576a064974b8efc59927", 0xef}, {&(0x7f00000009c0)="444b883bb60730f701e30bebcc317e7703cc6d25274e8de9bbd297415b281637fbed19e67b82edccb1d98624d030cc3587367919aadae49cd7bb227f26f4299293549678f584e54d988439718942535f98f9ca6aabcca24c56c76f7825709f15be681378a1c2f5897160acfddb792dbd6b7936235abaadf256512ccfde6fc51a9c8822b1c1fad5cc766a237660ca6c96cd1ffbe89910341a8907ec9e2356bb6375584469cc81482f340aec93258a61d532de6fb4d2f7d661d27baee1f599d9d11a23ad7b29a5ec80fb72ac2850", 0xcd}, {&(0x7f0000000ac0)="a9d2bcf6c2772c9e2fd070d217e0707929519e279612081513a5eaa35eb0b97e09415439b89bdfd3742194eca942adb220c855a285aca19cd9b235203d2953b68312e3273160397af8ac7db42cb8c7f4c30bce91899751c70ab25ace914f43493d52ad91228d5efa6fb1f147997e9ee66a4affa7774f8b33f248758c969692b3977887f27da38cb402d00ca2668392e2b69a72713ced453a0fc4d5d668cd14bc865c0ecc6f40d631a83f01391764f3653746255679b0c6762a8994d0507cbc3bbd6e9dbcf558f282", 0xc8}, {&(0x7f0000000bc0)="3a6f7afdeb37e3c8d530e64530a4084b5d450100b3b1b5f320c15bd774e8920aba220085fb44bcb7d05bca98b324a61184e822ded6ce28d978b16fa4f9e0f15260820caa01dba8587ab26b23fb003144", 0x50}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)="ef9bd6f5ec85684ce36e78dd543ca45c3a56f18d88bc1df28b0a84845261a6758d0cde427240c53ec535dc19bdb8f45082627f2da5225b1263d3e2f22a33be57c552887f885a0b645da16aaec0c44423b8e29d791f64d7fe1fb33dfa", 0x5c}, {&(0x7f0000000d00)="980dbbd8d3e4fa96af23bf9abfc9d7000ca70531fe7f0410a9a0428a4e5d0c870a2f63d169e49a7a9cb060cf315e4d9e324d09bac47a0f4f9053e79240daa58a078864d97cc2d995e4214d74a1d2329cf8138170cee516bf1bc42d95e2b7e449d49490e5344fbdf0757bdf118a08bcef055176f0f3ad3d7b5ff1d99a72863c1b630467b32aefa27721d790f18b", 0x8d}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002300)="82c335772ebf1fdf35a39916ff3dcdbf2b8d9c02eedb20587663fe59788b346f38739af8e073f62d86e954c1f8a03087c47f093388f7d849e4a41077491e284b6e753c42114c779f132b6ffb19f771d6018da7e8d6b746114b07ac5b", 0x5c}], 0x1}}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002800)="4daa0edacfa27ff32562d64f2b79a6f8cecc0d4d8c7ede7801346852c2718a2c56257a3d", 0x24}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f00000028c0)="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", 0xeed}], 0x1}}], 0x6, 0x8000)

21:37:54 executing program 2:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x7, 0x110001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:54 executing program 4:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in=@multicast2}, {@in6=@loopback, 0x0, 0x33}, @in6=@remote}}}, 0xf8}}, 0x0)

21:37:54 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
creat(0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, 0x0)
sendfile(r0, r0, 0x0, 0x24000000)

21:37:54 executing program 0:
preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/current\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x0)

21:37:55 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0x90003})

21:37:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@loopback, @in6=@empty}, {@in6=@empty, 0x0, 0x32}, @in6=@remote}}}, 0xf8}}, 0x0)

21:37:55 executing program 1:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x0, 0x7ffd, 0x8000)
fallocate(r1, 0x3, 0x0, 0xfff9)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

21:37:55 executing program 2:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x7, 0x110001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fallocate(r1, 0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:55 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x9b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa)
r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0)
write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfea4)
fallocate(r1, 0x0, 0x7ffd, 0x8000)
fallocate(r1, 0x3, 0x0, 0xfff9)
r2 = socket(0x10, 0x2, 0x0)
write(r2, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})

21:37:55 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0x90003})

21:37:55 executing program 5:
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)

21:37:55 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="05030004f3423e0001a041a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

21:37:56 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0x90003})

21:37:56 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x271ea3ad, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_submit(0x0, 0x0, &(0x7f00000001c0))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0)
io_setup(0xb, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000540)=[0x0])
io_submit(0x0, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x24000000)

21:37:56 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@allocspi={0xf8, 0x16, 0x317, 0x0, 0x0, {{{@in6=@mcast1, @in=@multicast2}, {@in6=@local, 0x0, 0x32}, @in6=@remote}}}, 0xf8}}, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)

21:37:56 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xa00000000000000, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)

21:37:56 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r3, 0x0)
setfsgid(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:56 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000100)={0x90003})

21:37:56 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x115}, 0x14}}, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0xc00c00)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x0, 0x2)
read$FUSE(r3, &(0x7f00000004c0), 0x1000)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setuid(0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes256, 0x4, [], "425a6c890a205697f03e7dadf0ca3f2f"})

21:37:56 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x73)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10, 0xffffffffffffffff, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101, 0x0)
ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000))
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0xb}, 0x10)

[  213.443954] audit: type=1400 audit(1570138676.566:66): avc:  denied  { map_create } for  pid=8200 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[  213.710406] audit: type=1400 audit(1570138676.626:67): avc:  denied  { map_read map_write } for  pid=8200 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
21:37:57 executing program 3:
r0 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r0, 0x84, 0x23, &(0x7f0000000ac0), 0x8)

21:37:57 executing program 0:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket(0x200000000000011, 0x80000000000003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmmsg(r1, &(0x7f0000000d00), 0x400004e, 0x0)

21:37:57 executing program 4:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff3fffffffffff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)

21:37:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r3, 0x0)
setfsgid(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:57 executing program 5:
socket$inet6_tcp(0xa, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0x3)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, 0x0, 0x115}, 0x14}}, 0x0)
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x101, 0xc00c00)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
r3 = syz_open_dev$radio(&(0x7f00000002c0)='/dev/radio#\x00', 0x0, 0x2)
read$FUSE(r3, &(0x7f00000004c0), 0x1000)
mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setuid(0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000280)=@v2={0x2, @aes256, 0x4, [], "425a6c890a205697f03e7dadf0ca3f2f"})

21:37:57 executing program 2:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0xa00000000000000, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008105e00f80ecdb4cb92e0a68022c14000000160001008e7948f328995a017c7b5851060000000003", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$sock(0xffffffffffffffff, 0x0, 0x0)

21:37:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r3, 0x0)
setfsgid(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:57 executing program 2:
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x5, @local, 'bridge0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000240)='N', 0x1}], 0x2}}], 0x1, 0x0)

21:37:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

21:37:57 executing program 3:
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
fchmod(r0, 0x240)

21:37:57 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r3, 0x0)
setfsgid(0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:57 executing program 2:
socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$kcm(r0, &(0x7f0000001200)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x2, {0xa, 0x0, 0x9041, @rand_addr="6772c87ed7c8245e03ee08efda56be68"}}}, 0xae, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x0, 0x7}], 0x10}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x10, r0, 0x0)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaa2aaaaaaabb8137ffff001e000000000000ffffffffffff0000ffffff8100000000000000002f979adae97ac584e1462dfd40"], 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x101, 0x0)
ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0)
clock_gettime(0x0, &(0x7f0000000000))
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$int_in(r2, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001400)=ANY=[])
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r4})
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={0x0, r4, 0xb}, 0x10)

21:37:57 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000000)=0x7, 0x4)
writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000340)="59000000140019232b834b80043f679a10ff6400940005002a925aaa000000000100008400f0fffeff2c707f8f00ff050000000010000100090a1000410400000000fcff00000000000000000000000000000000000000000f", 0x59}], 0x1)

21:37:57 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0x0)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4})
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r4})

21:37:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:57 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f00000000c0)="0f20d86635080000000f22d8d8f7ddc9650f300f00509fb800008ec8ace1ebebb9800000c00f32f20f1c0066b80000000066ba000000000f300f306436da7d009f", 0x43}], 0x1, 0x0, 0x0, 0x184)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)={0x0, 0x91})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:57 executing program 0:

21:37:57 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x56)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:58 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:58 executing program 0:

21:37:58 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x56)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:58 executing program 0:

21:37:58 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0x56)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:58 executing program 2:

21:37:58 executing program 3:

21:37:58 executing program 0:

21:37:58 executing program 4:

21:37:58 executing program 4:

21:37:58 executing program 3:

21:37:58 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
setresuid(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:58 executing program 0:

21:37:58 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:58 executing program 2:

21:37:58 executing program 3:

21:37:58 executing program 4:

21:37:58 executing program 2:

21:37:58 executing program 0:

21:37:58 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
setresuid(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:58 executing program 2:

21:37:58 executing program 4:

21:37:58 executing program 3:

21:37:58 executing program 0:

21:37:58 executing program 4:

21:37:59 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:59 executing program 2:

21:37:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
setresuid(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:59 executing program 3:

21:37:59 executing program 0:

21:37:59 executing program 4:

21:37:59 executing program 2:

21:37:59 executing program 3:

21:37:59 executing program 0:

21:37:59 executing program 4:

21:37:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:59 executing program 3:

21:37:59 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:59 executing program 2:

21:37:59 executing program 4:
inotify_init()
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
sendfile(r0, r1, 0x0, 0x1000000000e2)

21:37:59 executing program 0:
mkdir(&(0x7f000053bff8)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000db0ff8)='./file0\x00', &(0x7f0000f9cffb)='proc\x00', 0x0, 0x0)
r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000077000)=""/133, 0x36)
getdents64(r0, 0x0, 0x0)

21:37:59 executing program 3:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0, 0x8e56b071b577b247, 0x0)
read$FUSE(r0, 0x0, 0x0)
open$dir(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0)

21:37:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:59 executing program 2:
syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)

21:37:59 executing program 0:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f000000fffa)='./bus\x00', 0x103042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

21:37:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

[  216.468941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=8390 comm=syz-executor.4
21:37:59 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

[  216.546507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=8402 comm=syz-executor.4
21:37:59 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:37:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:59 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[], 0x0, 0x206})
lstat(&(0x7f0000000240)='./file0\x00', 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:37:59 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:37:59 executing program 2:
r0 = socket$kcm(0x10, 0x3, 0x0)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000015008105e00f80ecdb4cb92e0a68022c14020000160001008e7948f328995a017c7b58510600000001ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0)

21:38:00 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1a000}], 0x1}, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:38:00 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='2:2\t'], 0x4)

21:38:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:38:00 executing program 4:
r0 = socket$inet6(0xa, 0x80803, 0x2)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

21:38:00 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:38:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000680)='status\x00')
preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0)

21:38:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000100)={0x0, 0x4, 0xbbc00000000, &(0x7f0000000040)=0x671f})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getresgid(&(0x7f0000000000), 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r3=>0x0})
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@loopback}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8)
r4 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00')
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200), 0x4)
socket(0x3, 0x80d, 0x0)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendto$inet6(r0, &(0x7f0000000300)="0503000406023e0001a041a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0)

21:38:00 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

21:38:00 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="66b829018ec0b9800000c00f3235002000000f3066baf80cb8c8f61a8eef66bafc0ced0f787e0036400fc75a00c4e1f9e601c4018575504f0f87d485a71b64440f01c43e662666470f38804185", 0x4d}], 0x1, 0x0, 0x0, 0xfffffffffffffe96)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4)
ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000180)=ANY=[@ANYBLOB="03cf"])
ioctl$KVM_RUN(r2, 0xae80, 0x0)

21:38:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

21:38:00 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0)
socket$unix(0x1, 0x0, 0x0)
write$P9_RLCREATE(0xffffffffffffffff, 0x0, 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x1b, 0x2}, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000180)=':\x00', 0xfffffffffffffffe)
keyctl$search(0xa, 0x0, &(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, r1)
ioctl$BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)="1e768a166a72c00a722070a4b679072df26caa29374e4efd3940d8b53fa9703f7720166feef8ce9ed7d95dd91f878d5887d23ff72d5a12679d47f5913fc1c9f92a1d6f3b2e719f20ebdbc2b7bedbabb96ad6918a83141dfd57aab4b02352951fba51e0a012e6adf341a57f3d93dc7dfaffbd33b07213301725a27ab3fb8a3bce88ddd732863b221a7472f1ecb9166e8d158ad747c267abb9f5d8ae789638884af164aa7162289d99849b62e31a416cfedfd7c34d9aac5870d4abf9c43e1f7c313265607605912ccdf36b661af9afbde50eaac77b1262d94764fb2ceba275c71f234463293aa08332f7", 0xe9)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000040)={0x2, 0x0, 0x9})
clone(0x70024100, &(0x7f0000000a00), 0x0, 0x0, 0x0)
keyctl$search(0xa, 0x0, &(0x7f0000000140)='big_key\x00', 0x0, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r3, 0x0)
fcntl$setstatus(r2, 0x4, 0x44800)
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r5=>0x0)
r6 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r6, 0x0)
fcntl$setstatus(r4, 0x4, 0x44800)
io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x4000}])
io_submit(r5, 0x8ef8ff821a0da9dc, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}])
io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)="92", 0x1}])
io_cancel(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x1}, &(0x7f0000000180))
r7 = socket$packet(0x11, 0x3, 0x300)
fcntl$getflags(r7, 0x3)
fcntl$getownex(r7, 0x10, &(0x7f0000000080))

21:38:00 executing program 5:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x1ff}, 0x8)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/195, 0xff34}, {&(0x7f0000000300)=""/204, 0xcc}], 0x2)

[  217.741316] audit: type=1400 audit(1570138680.866:68): avc:  denied  { sys_admin } for  pid=8473 comm="syz-executor.2" capability=21  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1
[  217.795680] ==================================================================
[  217.803252] BUG: KASAN: null-ptr-deref in kvm_write_guest_virt_system+0x64/0x90
[  217.810718] Write of size 24 at addr 0000000000000000 by task syz-executor.4/8478
[  217.818347] 
[  217.820001] CPU: 1 PID: 8478 Comm: syz-executor.4 Not tainted 4.19.76 #0
[  217.826853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  217.836216] Call Trace:
[  217.838840]  dump_stack+0x172/0x1f0
[  217.842526]  ? kvm_write_guest_virt_system+0x64/0x90
[  217.847656]  kasan_report.cold+0x199/0x2ba
[  217.851908]  check_memory_region+0x123/0x190
[  217.856359]  memset+0x24/0x40
[  217.857163] IPVS: ftp: loaded support on port[0] = 21
[  217.859479]  kvm_write_guest_virt_system+0x64/0x90
[  217.859504]  handle_vmread+0x7fe/0xa10
[  217.859522]  ? handle_invpcid+0xa80/0xa80
[  217.859540]  ? __lock_is_held+0xb6/0x140
[  217.882519]  ? __lock_is_held+0xb6/0x140
[  217.886614]  ? handle_invpcid+0xa80/0xa80
[  217.891005]  vmx_handle_exit+0x276/0x16b0
[  217.895207]  ? lock_acquire+0x16f/0x3f0
[  217.899198]  ? vcpu_enter_guest+0xf15/0x5ed0
[  217.903721]  vcpu_enter_guest+0x10ca/0x5ed0
[  217.908076]  ? kvm_vcpu_ioctl+0x181/0xf90
[  217.912247]  ? emulator_read_emulated+0x50/0x50
[  217.912265]  ? lock_acquire+0x16f/0x3f0
[  217.912284]  ? kvm_check_async_pf_completion+0x2d8/0x440
[  217.912310]  kvm_arch_vcpu_ioctl_run+0x457/0x16b0
[  217.912321]  ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0
[  217.912336]  kvm_vcpu_ioctl+0x4dc/0xf90
[  217.912347]  ? kvm_vcpu_block+0xcc0/0xcc0
21:38:01 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x56)
setresuid(0x0, r1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x3}, 0x3c)

[  217.926523]  ? mark_held_locks+0x100/0x100
[  217.926543]  ? __might_fault+0x12b/0x1e0
[  217.926558]  ? __fget+0x340/0x540
[  217.926575]  ? find_held_lock+0x35/0x130
[  217.926590]  ? __fget+0x340/0x540
[  217.926608]  ? kvm_vcpu_block+0xcc0/0xcc0
[  217.926625]  do_vfs_ioctl+0xd5f/0x1380
[  217.926642]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  217.926657]  ? selinux_file_ioctl+0x125/0x5e0
[  217.926672]  ? ioctl_preallocate+0x210/0x210
[  217.936881] kobject: 'lo' (0000000055e6eb9a): fill_kobj_path: path = '/devices/virtual/net/lo'
[  217.940596]  ? selinux_file_mprotect+0x620/0x620
[  217.940626]  ? iterate_fd+0x360/0x360
[  217.940643]  ? nsecs_to_jiffies+0x30/0x30
[  217.940664]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  217.940680]  ? security_file_ioctl+0x8d/0xc0
[  217.948767] kobject: 'queues' (00000000fb2af32d): kobject_add_internal: parent: 'lo', set: '<NULL>'
[  217.949080]  ksys_ioctl+0xab/0xd0
[  217.949099]  __x64_sys_ioctl+0x73/0xb0
[  217.949122]  do_syscall_64+0xfd/0x620
[  217.953504] kobject: 'queues' (00000000fb2af32d): kobject_uevent_env
[  217.956623]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  217.956635] RIP: 0033:0x459a29
[  217.956649] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  217.956656] RSP: 002b:00007fc59c0f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.956672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29
[  217.956680] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  217.956689] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  217.956698] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc59c0f56d4
[  217.956706] R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff
[  217.956728] ==================================================================
[  217.956733] Disabling lock debugging due to kernel taint
[  217.965277] kobject: 'loop1' (00000000ea700d77): kobject_uevent_env
[  217.978435] Kernel panic - not syncing: panic_on_warn set ...
[  217.978435] 
[  218.150125] CPU: 0 PID: 8478 Comm: syz-executor.4 Tainted: G    B             4.19.76 #0
[  218.159040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  218.168499] Call Trace:
[  218.171086]  dump_stack+0x172/0x1f0
[  218.174798]  ? kvm_write_guest_virt_system+0x64/0x90
[  218.180419]  panic+0x263/0x507
[  218.183607]  ? __warn_printk+0xf3/0xf3
[  218.188448]  ? kvm_write_guest_virt_system+0x64/0x90
[  218.193762]  ? preempt_schedule+0x4b/0x60
[  218.197906]  ? ___preempt_schedule+0x16/0x18
[  218.202308]  ? trace_hardirqs_on+0x5e/0x220
[  218.206624]  ? kvm_write_guest_virt_system+0x64/0x90
[  218.211719]  kasan_end_report+0x47/0x4f
[  218.215687]  kasan_report.cold+0xa9/0x2ba
[  218.219828]  check_memory_region+0x123/0x190
[  218.224311]  memset+0x24/0x40
[  218.227428]  kvm_write_guest_virt_system+0x64/0x90
[  218.232357]  handle_vmread+0x7fe/0xa10
[  218.236450]  ? handle_invpcid+0xa80/0xa80
[  218.240593]  ? __lock_is_held+0xb6/0x140
[  218.244650]  ? __lock_is_held+0xb6/0x140
[  218.248724]  ? handle_invpcid+0xa80/0xa80
[  218.252868]  vmx_handle_exit+0x276/0x16b0
[  218.257007]  ? lock_acquire+0x16f/0x3f0
[  218.260973]  ? vcpu_enter_guest+0xf15/0x5ed0
[  218.265405]  vcpu_enter_guest+0x10ca/0x5ed0
[  218.269715]  ? kvm_vcpu_ioctl+0x181/0xf90
[  218.273851]  ? emulator_read_emulated+0x50/0x50
[  218.278521]  ? lock_acquire+0x16f/0x3f0
[  218.282508]  ? kvm_check_async_pf_completion+0x2d8/0x440
[  218.287952]  kvm_arch_vcpu_ioctl_run+0x457/0x16b0
[  218.292786]  ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0
[  218.297798]  kvm_vcpu_ioctl+0x4dc/0xf90
[  218.301768]  ? kvm_vcpu_block+0xcc0/0xcc0
[  218.305907]  ? mark_held_locks+0x100/0x100
[  218.310136]  ? __might_fault+0x12b/0x1e0
[  218.314208]  ? __fget+0x340/0x540
[  218.317653]  ? find_held_lock+0x35/0x130
[  218.321787]  ? __fget+0x340/0x540
[  218.325336]  ? kvm_vcpu_block+0xcc0/0xcc0
[  218.329498]  do_vfs_ioctl+0xd5f/0x1380
[  218.333782]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  218.339339]  ? selinux_file_ioctl+0x125/0x5e0
[  218.343840]  ? ioctl_preallocate+0x210/0x210
[  218.348254]  ? selinux_file_mprotect+0x620/0x620
[  218.353006]  ? iterate_fd+0x360/0x360
[  218.356798]  ? nsecs_to_jiffies+0x30/0x30
[  218.360942]  ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[  218.366576]  ? security_file_ioctl+0x8d/0xc0
[  218.370976]  ksys_ioctl+0xab/0xd0
[  218.374429]  __x64_sys_ioctl+0x73/0xb0
[  218.378316]  do_syscall_64+0xfd/0x620
[  218.382110]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[  218.387303] RIP: 0033:0x459a29
[  218.390498] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[  218.409394] RSP: 002b:00007fc59c0f4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  218.417362] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000459a29
[  218.425867] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  218.433147] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  218.440405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc59c0f56d4
[  218.448366] R13: 00000000004c2ddb R14: 00000000004d68f8 R15: 00000000ffffffff
[  218.457424] Kernel Offset: disabled
[  218.461351] Rebooting in 86400 seconds..