Warning: Permanently added '10.128.10.53' (ECDSA) to the list of known hosts.
[   40.076408] random: sshd: uninitialized urandom read (32 bytes read)
2019/09/10 23:23:14 fuzzer started
[   40.267058] audit: type=1400 audit(1568157794.355:36): avc:  denied  { map } for  pid=6914 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   40.674112] random: cc1: uninitialized urandom read (8 bytes read)
2019/09/10 23:23:15 dialing manager at 10.128.0.105:33975
2019/09/10 23:23:15 syscalls: 2466
2019/09/10 23:23:15 code coverage: enabled
2019/09/10 23:23:15 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/09/10 23:23:15 extra coverage: extra coverage is not supported by the kernel
2019/09/10 23:23:15 setuid sandbox: enabled
2019/09/10 23:23:15 namespace sandbox: enabled
2019/09/10 23:23:15 Android sandbox: /sys/fs/selinux/policy does not exist
2019/09/10 23:23:15 fault injection: enabled
2019/09/10 23:23:15 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/09/10 23:23:15 net packet injection: enabled
2019/09/10 23:23:15 net device setup: enabled
[   42.240653] random: crng init done
23:25:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x412, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
capset(&(0x7f0000001000)={0x19980330}, &(0x7f0000000000))
setpriority(0x1, 0x0, 0x0)

23:25:11 executing program 0:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

23:25:11 executing program 3:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x40000)

23:25:11 executing program 1:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x10000)

23:25:11 executing program 2:
msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0)

23:25:11 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
socket$inet(0x2, 0x0, 0x0)
creat(0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x2)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235000400000f30b8060000000f23c00f21f835020001000f23f8b8060000000f23d00f21f8353000000a0f23f89abb0000006b0066bad004b051eec4c2f5bbf5c4e1fa70c764c4c2359dd8f2a766b8c7000f00d8", 0x5b}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  156.952514] audit: type=1400 audit(1568157911.045:37): avc:  denied  { map } for  pid=6914 comm="syz-fuzzer" path="/root/syzkaller-shm625586186" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[  157.014324] audit: type=1400 audit(1568157911.065:38): avc:  denied  { map } for  pid=6932 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=29 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[  157.380977] IPVS: ftp: loaded support on port[0] = 21
[  158.190671] chnl_net:caif_netlink_parms(): no params data found
[  158.201518] IPVS: ftp: loaded support on port[0] = 21
[  158.232216] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.238745] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.245891] device bridge_slave_0 entered promiscuous mode
[  158.259493] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.265940] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.272893] device bridge_slave_1 entered promiscuous mode
[  158.294892] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  158.305312] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  158.330307] IPVS: ftp: loaded support on port[0] = 21
[  158.345021] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  158.352261] team0: Port device team_slave_0 added
[  158.359457] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  158.367101] team0: Port device team_slave_1 added
[  158.373912] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  158.384489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  158.435861] chnl_net:caif_netlink_parms(): no params data found
[  158.481944] device hsr_slave_0 entered promiscuous mode
[  158.520297] device hsr_slave_1 entered promiscuous mode
[  158.582510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  158.597947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  158.628101] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.634596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  158.641540] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.647872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  158.656585] IPVS: ftp: loaded support on port[0] = 21
[  158.707405] chnl_net:caif_netlink_parms(): no params data found
[  158.736008] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.742461] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.749328] device bridge_slave_0 entered promiscuous mode
[  158.757656] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.764049] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.771172] device bridge_slave_1 entered promiscuous mode
[  158.795528] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  158.804684] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  158.841045] IPVS: ftp: loaded support on port[0] = 21
[  158.851755] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  158.858957] team0: Port device team_slave_0 added
[  158.864538] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  158.871949] team0: Port device team_slave_1 added
[  158.877293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  158.895908] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.902737] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.909662] device bridge_slave_0 entered promiscuous mode
[  158.918210] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.924597] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.932625] device bridge_slave_1 entered promiscuous mode
[  158.944305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  159.008178] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  159.072956] device hsr_slave_0 entered promiscuous mode
[  159.130442] device hsr_slave_1 entered promiscuous mode
[  159.190710] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  159.200867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  159.211320] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  159.224566] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.241809] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.259598] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.278640] chnl_net:caif_netlink_parms(): no params data found
[  159.287705] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  159.304234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  159.311361] team0: Port device team_slave_0 added
[  159.316744] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  159.324148] team0: Port device team_slave_1 added
[  159.333585] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  159.347733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  159.356128] IPVS: ftp: loaded support on port[0] = 21
[  159.356741] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  159.389521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.397091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.404618] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  159.423376] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  159.429448] 8021q: adding VLAN 0 to HW filter on device team0
[  159.449226] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.456143] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.463561] device bridge_slave_0 entered promiscuous mode
[  159.522194] device hsr_slave_0 entered promiscuous mode
[  159.570444] device hsr_slave_1 entered promiscuous mode
[  159.613169] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  159.624834] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.631834] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.638679] device bridge_slave_1 entered promiscuous mode
[  159.658510] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  159.689383] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  159.705853] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  159.723544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.733194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.740964] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.747339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.759178] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  159.769295] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  159.792695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.800669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.808471] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.814844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.824210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  159.831706] chnl_net:caif_netlink_parms(): no params data found
[  159.841331] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  159.858243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  159.866581] team0: Port device team_slave_0 added
[  159.872134] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  159.879153] team0: Port device team_slave_1 added
[  159.886687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  159.895656] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  159.906622] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  159.914518] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  159.945647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  159.956173] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  160.003201] device hsr_slave_0 entered promiscuous mode
[  160.040383] device hsr_slave_1 entered promiscuous mode
[  160.095486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.103301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.110961] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.121942] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.130539] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  160.138449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  160.145835] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  160.152724] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.159070] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.167215] device bridge_slave_0 entered promiscuous mode
[  160.177264] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.185796] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.192852] device bridge_slave_1 entered promiscuous mode
[  160.206261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.213961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.235027] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  160.251110] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  160.259694] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  160.269186] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  160.277039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  160.326366] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  160.339025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  160.346154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  160.353016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.360502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.370751] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  160.376809] 8021q: adding VLAN 0 to HW filter on device team0
[  160.396054] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  160.407108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  160.416740] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  160.424160] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  160.431319] team0: Port device team_slave_0 added
[  160.436461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  160.443924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.451378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  160.458994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  160.466576] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.472909] bridge0: port 1(bridge_slave_0) entered forwarding state
[  160.479851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.487916] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.495466] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.501843] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.508714] chnl_net:caif_netlink_parms(): no params data found
[  160.518654] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  160.524770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  160.534893] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  160.542506] team0: Port device team_slave_1 added
[  160.547579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  160.572445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  160.592497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  160.606217] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.613149] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.619957] device bridge_slave_0 entered promiscuous mode
[  160.626345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.636652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  160.647469] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  160.654760] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  160.673315] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.679655] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.687163] device bridge_slave_1 entered promiscuous mode
[  160.693781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.703820] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  160.713687] 8021q: adding VLAN 0 to HW filter on device bond0
[  160.762217] device hsr_slave_0 entered promiscuous mode
[  160.811716] device hsr_slave_1 entered promiscuous mode
[  160.855185] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  160.863491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.871149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.878625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.888194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  160.902844] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  160.912344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.919913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.930660] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  160.937513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  160.947289] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  160.956333] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  160.966796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.975736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.985020] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  160.998181] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  161.009369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.017628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.027489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.035177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.042895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.056085] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  161.065074] team0: Port device team_slave_0 added
[  161.072124] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  161.079176] team0: Port device team_slave_1 added
[  161.087216] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  161.096874] 8021q: adding VLAN 0 to HW filter on device team0
[  161.104076] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  161.110514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.117600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  161.125521] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  161.136391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  161.147322] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  161.169049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.176946] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.184875] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.191263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.198886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.207793] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
23:25:15 executing program 3:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

[  161.264995] device hsr_slave_0 entered promiscuous mode
[  161.310980] device hsr_slave_1 entered promiscuous mode
[  161.344184] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.352398] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  161.360861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.368529] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.377245] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.383624] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.392289] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  161.399190] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  161.411356] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  161.419969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  161.450517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
23:25:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000002c0)="11dca5055e0bcfe47bf070")
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf003}, 0x334, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000729d50000000000000007000000", @ANYRES32, @ANYBLOB="0a0f07000a000200aaaaaaaaaa0c000001000000"], 0x42e}}, 0x0)

[  161.458302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  161.481703] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.491370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  161.499394] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.515078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  161.523799] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  161.533496] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  161.543515] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  161.549806] PF_BRIDGE: RTM_NEWNEIGH with unknown ifindex
[  161.556179] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
23:25:15 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
ftruncate(r1, 0x808200)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r1, r2, 0x0, 0x3aa6e94a)

[  161.565600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  161.574700] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  161.591648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  161.604975] audit: type=1804 audit(1568157915.695:39): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/syzcgroup/unified/syz3/bus" dev="sda1" ino=16522 res=1
[  161.636181] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.644377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.665292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.671677] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use)
[  161.673055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.695914] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  161.702790] 8021q: adding VLAN 0 to HW filter on device team0
[  161.711011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  161.719501] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  161.731675] 8021q: adding VLAN 0 to HW filter on device team0
[  161.743986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  161.752949] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.759984] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
23:25:15 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000000000000000000000000005600000000000000950000000000bc8b5916bd417500007b7f5f503971ad3c89ef51cbf0b22ac2b3c7169f464b4d5fa9a0333064f03ad6beeb27266b41b94ebbd1a2aeb83550e5d9f11d991bfe599c99b1803ab04b5255e3a03e391087d33331cbb469a03879497f9072649d7a798ce295210fde0347a72544e16bf06f57483d5ff9cb0aba9f041dedf86151cffd663e27bd97e3f152ad777afd3088250cceb310fe43e5f1005b8bb5bf89af6e2e122511865a343723e5d1a347ee5f2ce58afb034df7e3f0f7e603a8982e5c91525a795b2f31bda40af18398e1a746ef5822a623709995"], &(0x7f0000000180)='GPL\x02u\xf1\x85y*_\xb2\xf0S\xfe\x8e\xdfj\a\x19\v\xc2\x8c\x891\xf9D\xe1\x13\xc4)W\xd1}3\x9d\x10\xad\as\xdc\x81\xe2\xa9\x8d\xdf\x98u1\xc1\xc5\xa8\xe7\xd4[\xb7\xfa\xd3\r\xa8\x0e\xcb\x8e@\x1f\xdc\xa1\xf0e\x9b\xed.\xbf\x1d\xbc\x86b\xaa\x00c\x8dhD\f\xd0m]_\xa0\xd2\xc2\xcdg\x9fvt\",\xe1[\xb1u\xc2f.j\x84qg(h\xba\xe0\x1a[\x11o\xf7\x7f\x05]\x1c1\x9dL(n\xce\xeb\vvRa\xb2\xd1\xc4\xc7:R\x9f\xe5\xd1j\xfcD\f\xe8\xc5f\x1b3\xe6Xy\x0fe\xe8\xb2\xbf\xc0\xce\x7f\xfa\xaf\xe9mt2\xa8PA\x88\xa4v\xe6WL\xfc\x16\xf1\x9b\xe96\x10K\x02\xee\xb2=\xd2[\xca\x0f\xd4\x10ML,\x9cJ\x88(_qf\xcds\x8a\xa6\"\x9b\x97\xa5\xe2c\"G', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

[  161.772051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.775534] audit: type=1804 audit(1568157915.865:40): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/syzcgroup/unified/syz3/bus" dev="sda1" ino=16522 res=1
[  161.779728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
23:25:15 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd})
sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

[  161.826785] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  161.842704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  161.856545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  161.872607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.881191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.895479] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.901872] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.909092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.917178] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.925361] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.931759] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.939050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.947356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.958843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  161.971906] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  161.987569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.995869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.003509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.011624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.019225] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.025606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.033301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.034341] audit: type=1400 audit(1568157916.125:41): avc:  denied  { map } for  pid=6993 comm="syz-executor.5" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26502 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1
[  162.041725] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
23:25:16 executing program 5:
seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00', 0x2})
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

23:25:16 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x480b75594570cc50, 0x0, 0x0, 0xfffffcc5)

[  162.076842] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.083235] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.092731] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  162.104589] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  162.115374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.141307] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  162.152649] hrtimer: interrupt took 45520 ns
[  162.159056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.174868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.189486] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  162.213080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  162.224939] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  162.234028] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  162.247366] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.260859] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.269700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.291270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  162.299968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  162.316039] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  162.328789] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  162.339116] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.352981] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.364242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.384322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.409126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.418961] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.433355] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.444251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.456723] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.467237] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  162.476855] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  162.485746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.493533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.503285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.510283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.518644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  162.527790] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  162.534263] 8021q: adding VLAN 0 to HW filter on device team0
[  162.542338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.552228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.564378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  162.572421] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  162.585702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.593353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.601301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.608637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.617493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  162.626767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  162.635569] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  162.642343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.649232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.657032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.664702] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.671100] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.678341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.686430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.694030] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.700422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.708643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  162.717732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.729301] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  162.735902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.744666] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  162.753088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.765239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.775087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.782892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.797409] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  162.808285] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
23:25:16 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235000400000f30b8060000000f23c00f21f835020001000f23f8b8060000000f23d00f21f8353000000a0f23f89abb0000006b0066bad004b051eec4c2f5bbf5c4e1fa70c764c4c2359dd8f2a766b8c7000f00d8", 0x5b}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:16 executing program 5:
seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00', 0x2})
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

[  162.822828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  162.833646] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  162.842101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.849708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.858049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.865846] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.890389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  162.898194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.927087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.939645] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.949838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  162.995743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  163.014477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.027929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.055541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  163.066425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.076417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.097555] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  163.108608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.155030] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  163.175736] 8021q: adding VLAN 0 to HW filter on device batadv0
23:25:17 executing program 1:
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff)
read$FUSE(r0, &(0x7f0000000780), 0x1000)
link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0/file1\x00')
write$FUSE_ENTRY(r0, &(0x7f0000002000)={0x90, 0x0, 0x2}, 0x90)

23:25:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getegid()
ioctl$TUNSETGROUP(r1, 0x400454ce, 0x0)
fchdir(0xffffffffffffffff)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6100)
msgget$private(0x0, 0x0)
msgrcv(0x0, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000340)={0x3}, 0x0, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9})

23:25:18 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)
setresuid(0x0, 0xee01, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c)

23:25:18 executing program 3:
r0 = socket(0x200000000010, 0x2, 0x0)
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = dup3(r1, 0xffffffffffffffff, 0x0)
recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r2, 0x0, 0x8801)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000380)=0xc)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x10001}, 0x0)
socket(0x10, 0x80002, 0xc)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}})
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000))
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={<r3=>0x0, 0x2}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={r3, @in6={{0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}}, 0x4, 0xfff, 0x46, 0x6}, &(0x7f00000001c0)=0x98)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

23:25:18 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x8, 0x3ff, 0x0, 0x1}, 0x3c)
bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x18)

23:25:18 executing program 5:
seccomp(0x0, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
mmap$perf(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00', 0x2})
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x1)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

23:25:18 executing program 2:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r2, 0x0, 0x0, 0x16d0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x1, 0x80000005})

23:25:18 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000001c00)="11dca5055e0bcfe47bf070")
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00')
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/239, 0xef}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x2, 0x0)

[  164.221857] audit: type=1400 audit(1568157918.305:42): avc:  denied  { create } for  pid=7084 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
23:25:18 executing program 0:
unshare(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{}, {0xffffffff}]})
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x3}}, 0x18)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)

23:25:18 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x3c, r1, 0x201, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x3c}}, 0x0)

23:25:18 executing program 1:
r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0xb, @pix_mp={0x38305343}})

23:25:18 executing program 2:
unshare(0x20000)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x8, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/mnt\x00')
sched_setscheduler(0x0, 0x5, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0xb0401, 0x0)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
dup2(r0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000000))
r2 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{}, {0xffffffff}]})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x5)

[  164.434649] audit: type=1400 audit(1568157918.345:43): avc:  denied  { write } for  pid=7084 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
23:25:18 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

23:25:18 executing program 0:
unshare(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{}, {0xffffffff}]})
openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, 0x1, {0x3}}, 0x18)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)

[  164.523181] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 0, id = 0
23:25:18 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr\x00', 0x4)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd})
sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)

23:25:18 executing program 5:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2, @local, @remote}, 0xc)

[  164.609098] audit: type=1400 audit(1568157918.365:44): avc:  denied  { read } for  pid=7084 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
23:25:18 executing program 0:
seccomp(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00'})
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe)

23:25:18 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:18 executing program 2:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x44031, 0xffffffffffffffff, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')

23:25:18 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socket(0x0, 0x0, 0x0)
ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070")
syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @broadcast, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}, {[@rr={0xffffff86, 0x3}]}}, @icmp=@timestamp_reply}}}}, 0x0)

23:25:18 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

23:25:18 executing program 5:
seccomp(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)

23:25:18 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x9}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
writev(r0, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff0100014e2000010028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1)

[  164.783277] audit: type=1400 audit(1568157918.405:45): avc:  denied  { create } for  pid=7084 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
23:25:19 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)

23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:19 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000000), 0x0)

23:25:19 executing program 0:
seccomp(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00'})
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe)

[  165.034908] audit: type=1326 audit(1568157918.975:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7163 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0
[  165.120636] protocol 88fb is buggy, dev hsr_slave_0
[  165.125877] protocol 88fb is buggy, dev hsr_slave_1
[  165.130453] protocol 88fb is buggy, dev hsr_slave_0
[  165.135951] protocol 88fb is buggy, dev hsr_slave_1
23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  165.200115] protocol 88fb is buggy, dev hsr_slave_0
[  165.205293] protocol 88fb is buggy, dev hsr_slave_1
23:25:19 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000001400), &(0x7f0000001440)=0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042)
ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x60, 0x0, 0x1000020000006, 0x7ff0bdbe})

23:25:19 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)

23:25:19 executing program 0:
seccomp(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x80, 0x1000, 0xffffffff, 'queue0\x00'})
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe)

23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  165.462393] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  165.503837] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
23:25:19 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

[  165.680440] protocol 88fb is buggy, dev hsr_slave_0
[  165.685544] protocol 88fb is buggy, dev hsr_slave_1
[  165.710728] audit: type=1326 audit(1568157919.805:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=7163 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x0
23:25:19 executing program 5:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000000c000/0x3000)=nil, 0x3000, 0x3, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0)

23:25:19 executing program 0:
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000001004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)

23:25:19 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x0, 0x0)
bind$pptp(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000001400), &(0x7f0000001440)=0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
r1 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0x200800000000042)
ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000180)={0x2, 0x3020000, 0x60, 0x0, 0x1000020000006, 0x7ff0bdbe})

23:25:19 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
chdir(&(0x7f00000006c0)='./file0\x00')
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540))

23:25:19 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

23:25:20 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x354, 0x400200007fe, &(0x7f0000000100)={0x2, 0x10084e23, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
write$binfmt_elf64(r0, &(0x7f00000016c0)=ANY=[@ANYRES64, @ANYRESDEC, @ANYRES16], 0xffffffe6)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe07002b0000000000ff0711000000450001070000001419001a00120002000a0001000300"/57, 0x39}], 0x1)
recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000740)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x20013a5a}], 0x1, &(0x7f0000000200)=""/20, 0x8034}, 0x0)

[  165.932663] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  165.953158] overlayfs: fs on '.' does not support file handles, falling back to index=off.
23:25:20 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000057bff0)={0x2, 0x0, @multicast1}, 0x10)
mremap(&(0x7f00003fb000/0x400000)=nil, 0x400000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil)

23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  165.987908] vhci_hcd: default hub control req: 0000 v0000 i0000 l0
23:25:20 executing program 4:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0'])
chdir(&(0x7f00000006c0)='./file0\x00')
stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0))

23:25:20 executing program 3:
seccomp(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe)

[  166.108668] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  166.156414] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
23:25:20 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

23:25:20 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

[  166.203028] overlayfs: fs on '.' does not support file handles, falling back to index=off.
[  166.261789] overlayfs: failed to resolve 'file0': -2
23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:20 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x44031, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f000095dffc))

23:25:20 executing program 3:
seccomp(0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), 0xe)

23:25:20 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

23:25:20 executing program 0:
r0 = socket$unix(0x1, 0x80000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = gettid()
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, <r6=>0x0})
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r4, 0x1000000000013)
accept4(r1, 0x0, 0x0, 0x0)

23:25:20 executing program 3:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00')
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='oom_score_adj\x00p\x06e\xdd\xb9\xe9\xb5oH\xd9\xcf\x92\x97n\x13\xd6)\x02\x1d\xf8\xdc^\x81\x83\x99\xaa\xbf\xa9I\xc1\x8b\x06q_\x1a\xaa=\xc3\xec\xbb\xebr[\x86\xfb\a\xf7\x8e\xd3\xe8}\xe70i\x84_g\xb9\x8c\n\xd9\x895\xba\xf4\xf5I4q\xdd\xdf1 \xb2\\\x9c@\"^5\xae\x02t\x02\x7fz\xae\xa4:k\x04/2\xcb\fWt\x8d\x87F\xc69\x88\'\xcf/\x97U\xe9%\v\xa7<\t%-K\x81%\xa4\xa4\xb8\xd1Z\xc3i\n\xdeR\xa7e?p\xb4\xb9\xbbt\x19!\xc0\xd2\xe3\xdb\x9b@O>\xa7\x82\xb6\x02(\x8b1W;/\x82\xbf6\xe2\xd4\xfaM,\xe1kx\xa2\xf1:}IO\x80\v\xfb\xa1\x97\xa6\xaa\xdaU\x05\xe3g\xe5\xe9\xfc\xdcr\xad\x04\xc4\xc7\xa3\x904A&\xdf\xaf\x10\xf2\x0e\xc6\xaf\f\x9c\xcf\x8e\xcdQ5\xffs\xc4\x01\xe35\x11\xc1\x17C+\xab\xcf\xe2c\xb7`\xcb&\x84Z\x8b\xce\x9e\x9b\xb3a\x10\xf7~*\x84\x85L\x7f\xee\x18Vx\xcd>\xdcE\xf7\xbc\x13\xe0\x97\xd1_\x16\x0fU@\xe5\x8bn\x94\xea\xbd9G\xc8\xda\x9b\xab\x16\xb6\x16\x03\xba#6\x8c\xbbR\x81+\xbbu \xdcv\xc8\xd7\xec3\xd3\x01\xfd\xb546\xf5\xb4\xcf\x856\xea\xbf4)\xda\x16d\x86')
sendfile(r1, r0, &(0x7f0000000000)=0x5c, 0x80000000)

23:25:20 executing program 4:
seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

23:25:20 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:20 executing program 5:
seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000003c0)=[{0x800000000006, 0x0, 0x0, 0xdfffff7f7ffffffa}]})
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 'queue0\x00', 0x2})
close(0xffffffffffffffff)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000080), 0xe)

23:25:20 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

[  166.817872] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
[  166.826446] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'.
23:25:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:21 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$unix(r0, 0x0, 0x0, 0x1, 0x0, 0x0)

23:25:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

[  167.017976] ptrace attach of "/root/syz-executor.0"[6940] was attempted by "/root/syz-executor.0"[7338]
23:25:21 executing program 5:
openat$userio(0xffffffffffffff9c, &(0x7f0000002580)='/dev/userio\x00', 0x0, 0x0)
socket$kcm(0x29, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed0200000000000001004d01000000000000000000000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0)

23:25:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
sendmmsg(r1, &(0x7f00000000c0), 0x400000000000205, 0x0)

23:25:21 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xff, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x19404, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4)

23:25:21 executing program 0:
r0 = socket$unix(0x1, 0x80000000001, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
connect(r2, &(0x7f0000000000)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x43)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
r4 = gettid()
timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000044000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0)
r5 = inotify_init1(0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
fcntl$getownex(r5, 0x10, &(0x7f0000000280)={0x0, <r6=>0x0})
ptrace$setopts(0x4206, r6, 0x0, 0x0)
tkill(r4, 0x1000000000013)
accept4(r1, 0x0, 0x0, 0x0)

23:25:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:21 executing program 4:
unshare(0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, 0x0, &(0x7f0000000100))

23:25:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400000000000205, 0x0)

23:25:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
creat(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235000400000f30b8060000000f23c00f21f835020001000f23f8b8060000000f23d00f21f8353000000a0f23f89abb0000006b0066bad004b051eec4c2f5bbf5c4e1fa70c764c4c2359dd8f2a766b8c7000f00d8", 0x5b}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c5f74d06a546b9d, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x2, 0x0, 0x0, 0x1ffd, 0x20000000f9], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400000000000205, 0x0)

[  167.318399] ptrace attach of "/root/syz-executor.0"[6940] was attempted by "/root/syz-executor.0"[7379]
23:25:21 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000180)="11dca50d5e0bcfe47bf070")
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x0, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0)
pipe(0x0)
socket$inet_udp(0x2, 0x2, 0x0)
close(0xffffffffffffffff)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet6(r2, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c)
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0)
setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000140))
write$cgroup_int(r3, &(0x7f0000000080), 0x87f1a7)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040))
ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000001d4a4b896be39c1000000024499204000000008c"])
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, 0x0, 0xfffffffffffffd6f)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
socket(0x0, 0x0, 0x10000)
close(0xffffffffffffffff)
r4 = socket$inet6(0xa, 0x113bf1acbc926d01, 0x5)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, 0x0, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
recvfrom$inet6(r2, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c)
r5 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet6_int(r5, 0x29, 0xb, &(0x7f0000000300)=0x8, 0xfff7)
sendto$inet6(r5, &(0x7f00000000c0), 0xfffffdda, 0x0, 0x0, 0x0)

23:25:21 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
r1 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x11000008912, &(0x7f0000000000)="11dca50d6c0bcfe47bf070")

23:25:21 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x1c)
sendmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x400000000000205, 0x0)

23:25:21 executing program 4:
openat$rfkill(0xffffffffffffff9c, 0x0, 0xb0401, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x30b, 0x0, [], [{}, {0xffffffff}]})

23:25:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  167.533866] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
23:25:21 executing program 2:
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6(0xa, 0x3, 0x84)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
sendmmsg(r0, &(0x7f00000000c0), 0x400000000000205, 0x0)

23:25:21 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0)
creat(0x0, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="b9800000c00f3235000400000f30b8060000000f23c00f21f835020001000f23f8b8060000000f23d00f21f8353000000a0f23f89abb0000006b0066bad004b051eec4c2f5bbf5c4e1fa70c764c4c2359dd8f2a766b8c7000f00d8", 0x5b}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

23:25:21 executing program 4:
perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x200000000000011, 0x4000000000080002, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip_vti0\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @random="ecee8b1483f4"}, 0x14)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x4)
sendmmsg(r0, &(0x7f0000000d00), 0x400004e, 0x0)

[  167.680148] protocol 88fb is buggy, dev hsr_slave_0
[  167.685307] protocol 88fb is buggy, dev hsr_slave_1
23:25:21 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000021000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af"}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0x0, 0x3, 0x0, 0x0, 0x2000, 0x20000000fd], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  167.780845] ==================================================================
[  167.788430] BUG: KASAN: use-after-free in tcp_ack+0x414f/0x4760
[  167.794500] Read of size 4 at addr ffff8880a11a7d2c by task syz-executor.3/7417
[  167.801927] 
[  167.803540] CPU: 0 PID: 7417 Comm: syz-executor.3 Not tainted 4.14.143 #0
[  167.810446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  167.819778] Call Trace:
[  167.822339]  <IRQ>
[  167.824482]  dump_stack+0x138/0x197
[  167.828090]  ? tcp_ack+0x414f/0x4760
[  167.831811]  print_address_description.cold+0x7c/0x1dc
[  167.837067]  ? tcp_ack+0x414f/0x4760
[  167.840782]  kasan_report.cold+0xa9/0x2af
[  167.844914]  __asan_report_load4_noabort+0x14/0x20
[  167.849828]  tcp_ack+0x414f/0x4760
[  167.853349]  ? ___sys_sendmsg+0x349/0x840
[  167.857473]  ? __sys_sendmmsg+0x152/0x3a0
[  167.861603]  ? do_syscall_64+0x1e8/0x640
[  167.865642]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  167.870992]  ? tcp_fastretrans_alert+0x2620/0x2620
[  167.875902]  ? save_trace+0x290/0x290
[  167.879695]  tcp_rcv_established+0x3e9/0x1650
[  167.884170]  ? rt6_check_expired+0xa5/0x160
[  167.888470]  ? tcp_data_queue+0x3730/0x3730
[  167.892779]  ? ip6_dst_check+0x16a/0x2c0
[  167.896821]  tcp_v6_do_rcv+0x417/0x1190
[  167.900775]  tcp_v6_rcv+0x2446/0x2ed0
[  167.904556]  ? save_trace+0x290/0x290
[  167.908344]  ip6_input_finish+0x300/0x15a0
[  167.912578]  ip6_input+0xd5/0x340
[  167.916031]  ? ip6_input_finish+0x15a0/0x15a0
[  167.920513]  ? ipv6_rcv+0x16aa/0x1d20
[  167.924302]  ? ip6_rcv_finish+0x7a0/0x7a0
[  167.928429]  ip6_rcv_finish+0x23f/0x7a0
[  167.932381]  ipv6_rcv+0xe4d/0x1d20
[  167.935902]  ? percpu_ida_for_each_free+0x2b8/0x524
[  167.940898]  ? ip6_input+0x340/0x340
[  167.944597]  ? ip6_make_skb+0x410/0x410
[  167.948558]  ? refcount_inc_not_zero+0x88/0xe0
[  167.953117]  ? ip6_input+0x340/0x340
[  167.957073]  __netif_receive_skb_core+0x1eae/0x2ca0
[  167.962070]  ? trace_hardirqs_on+0x10/0x10
[  167.966286]  ? enqueue_to_backlog+0xcc0/0xcc0
[  167.970774]  ? process_backlog+0x43e/0x730
[  167.974993]  ? lock_acquire+0x16f/0x430
[  167.978958]  __netif_receive_skb+0x2c/0x1b0
[  167.983256]  ? __netif_receive_skb+0x2c/0x1b0
[  167.987729]  process_backlog+0x21f/0x730
[  167.991766]  ? mark_held_locks+0xb1/0x100
[  167.995898]  net_rx_action+0x490/0xf80
[  167.999770]  ? napi_complete_done+0x4f0/0x4f0
[  168.004257]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  168.009689]  __do_softirq+0x244/0x9a0
[  168.013474]  ? ip6_finish_output2+0x9c0/0x21b0
[  168.018034]  do_softirq_own_stack+0x2a/0x40
[  168.022341]  </IRQ>
[  168.024560]  do_softirq.part.0+0x10e/0x160
[  168.028775]  __local_bh_enable_ip+0x154/0x1a0
[  168.033249]  ip6_finish_output2+0x9f3/0x21b0
[  168.037640]  ? ip6_forward_finish+0x480/0x480
[  168.042116]  ? __lock_is_held+0xb6/0x140
[  168.046155]  ? check_preemption_disabled+0x3c/0x250
[  168.051153]  ip6_finish_output+0x4f4/0xb50
[  168.055365]  ? ip6_finish_output+0x4f4/0xb50
[  168.059753]  ip6_output+0x20f/0x6d0
[  168.063358]  ? ip6_finish_output+0xb50/0xb50
[  168.067745]  ? __lock_is_held+0xb6/0x140
[  168.071784]  ? check_preemption_disabled+0x3c/0x250
[  168.076778]  ? ip6_fragment+0x32c0/0x32c0
[  168.080903]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  168.086333]  ip6_xmit+0xd53/0x1eb0
[  168.089858]  ? ip6_finish_output2+0x21b0/0x21b0
[  168.094504]  ? ip6_dst_check+0x116/0x2c0
[  168.098546]  ? save_trace+0x290/0x290
[  168.102328]  ? ip6_append_data+0x2f0/0x2f0
[  168.106542]  ? __lock_is_held+0xb6/0x140
[  168.110598]  ? check_preemption_disabled+0x3c/0x250
[  168.115602]  inet6_csk_xmit+0x286/0x4d0
[  168.119555]  ? inet6_csk_update_pmtu+0x140/0x140
[  168.124309]  ? tcp_md5_do_lookup+0x1d3/0x530
[  168.131264]  __tcp_transmit_skb+0x172c/0x2fe0
[  168.135745]  ? bictcp_cong_avoid+0xe50/0xe50
[  168.140132]  ? __tcp_select_window+0x6e0/0x6e0
[  168.144694]  ? kvm_clock_read+0x23/0x40
[  168.148647]  ? sched_clock_cpu+0x1b/0x1c0
[  168.152772]  ? tcp_small_queue_check+0x184/0x1e0
[  168.157507]  tcp_write_xmit+0x523/0x4960
[  168.161551]  ? iov_iter_advance+0x218/0xc60
[  168.165859]  tcp_push_one+0xc1/0xf0
[  168.169466]  tcp_sendmsg_locked+0x157c/0x3200
[  168.173950]  ? tcp_sendpage+0x60/0x60
[  168.177734]  ? trace_hardirqs_on_caller+0x400/0x590
[  168.182728]  ? trace_hardirqs_on+0xd/0x10
[  168.186856]  tcp_sendmsg+0x30/0x50
[  168.190377]  inet_sendmsg+0x122/0x500
[  168.194155]  ? inet_recvmsg+0x500/0x500
[  168.198109]  sock_sendmsg+0xce/0x110
[  168.201802]  SYSC_sendto+0x206/0x310
[  168.205496]  ? SYSC_connect+0x2d0/0x2d0
[  168.209457]  ? kasan_check_read+0x11/0x20
[  168.213589]  ? _copy_to_user+0x87/0xd0
[  168.217459]  ? put_timespec64+0xb4/0x100
[  168.221496]  ? nsecs_to_jiffies+0x30/0x30
[  168.225626]  ? SyS_clock_gettime+0xf8/0x180
[  168.229925]  SyS_sendto+0x40/0x50
[  168.233359]  ? SyS_getpeername+0x30/0x30
[  168.237488]  do_syscall_64+0x1e8/0x640
[  168.241355]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  168.246192]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  168.251360] RIP: 0033:0x4598e9
[  168.254526] RSP: 002b:00007f0c7e436c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  168.262220] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9
[  168.269469] RDX: 00000000fffffdda RSI: 00000000200000c0 RDI: 000000000000000b
[  168.276716] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000
[  168.283964] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c7e4376d4
[  168.291225] R13: 00000000004c7880 R14: 00000000004dd188 R15: 00000000ffffffff
[  168.298494] 
[  168.300112] Allocated by task 7400:
[  168.303738]  save_stack_trace+0x16/0x20
[  168.307699]  save_stack+0x45/0xd0
[  168.311146]  kasan_kmalloc+0xce/0xf0
[  168.314844]  kasan_slab_alloc+0xf/0x20
[  168.318720]  kmem_cache_alloc_node+0x144/0x780
[  168.323286]  __alloc_skb+0x9c/0x500
[  168.326897]  sk_stream_alloc_skb+0xb3/0x780
[  168.331201]  tcp_sendmsg_locked+0xf61/0x3200
[  168.335602]  tcp_sendmsg+0x30/0x50
[  168.339125]  inet_sendmsg+0x122/0x500
[  168.342905]  sock_sendmsg+0xce/0x110
[  168.346620]  SYSC_sendto+0x206/0x310
[  168.350316]  SyS_sendto+0x40/0x50
[  168.353757]  do_syscall_64+0x1e8/0x640
[  168.357629]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  168.362797] 
[  168.364404] Freed by task 7400:
[  168.367668]  save_stack_trace+0x16/0x20
[  168.371629]  save_stack+0x45/0xd0
[  168.375064]  kasan_slab_free+0x75/0xc0
[  168.378948]  kmem_cache_free+0x83/0x2b0
[  168.382902]  kfree_skbmem+0x8d/0x120
[  168.386597]  __kfree_skb+0x1e/0x30
[  168.390117]  tcp_remove_empty_skb.part.0+0x231/0x2e0
[  168.395199]  tcp_sendmsg_locked+0x1ced/0x3200
[  168.399684]  tcp_sendmsg+0x30/0x50
[  168.403203]  inet_sendmsg+0x122/0x500
[  168.406981]  sock_sendmsg+0xce/0x110
[  168.410674]  SYSC_sendto+0x206/0x310
[  168.414364]  SyS_sendto+0x40/0x50
[  168.417802]  do_syscall_64+0x1e8/0x640
[  168.421669]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  168.426833] 
[  168.428443] The buggy address belongs to the object at ffff8880a11a7d00
[  168.428443]  which belongs to the cache skbuff_fclone_cache of size 472
[  168.441773] The buggy address is located 44 bytes inside of
[  168.441773]  472-byte region [ffff8880a11a7d00, ffff8880a11a7ed8)
[  168.453535] The buggy address belongs to the page:
[  168.458443] page:ffffea00028469c0 count:1 mapcount:0 mapping:ffff8880a11a7080 index:0x0
[  168.466575] flags: 0x1fffc0000000100(slab)
[  168.470790] raw: 01fffc0000000100 ffff8880a11a7080 0000000000000000 0000000100000006
[  168.478648] raw: ffffea00029041a0 ffffea0001d86560 ffff8880a9e19a80 0000000000000000
[  168.486502] page dumped because: kasan: bad access detected
[  168.492187] 
[  168.493789] Memory state around the buggy address:
[  168.498696]  ffff8880a11a7c00: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc
[  168.506033]  ffff8880a11a7c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  168.513369] >ffff8880a11a7d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.520703]                                   ^
[  168.525348]  ffff8880a11a7d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.532684]  ffff8880a11a7e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  168.540019] ==================================================================
[  168.547354] Disabling lock debugging due to kernel taint
[  168.552887] Kernel panic - not syncing: panic_on_warn set ...
[  168.552887] 
[  168.560244] CPU: 0 PID: 7417 Comm: syz-executor.3 Tainted: G    B           4.14.143 #0
[  168.568361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  168.577693] Call Trace:
[  168.580255]  <IRQ>
[  168.582398]  dump_stack+0x138/0x197
[  168.586008]  ? tcp_ack+0x414f/0x4760
[  168.589698]  panic+0x1f2/0x426
[  168.592872]  ? add_taint.cold+0x16/0x16
[  168.596827]  kasan_end_report+0x47/0x4f
[  168.600778]  kasan_report.cold+0x130/0x2af
[  168.604990]  __asan_report_load4_noabort+0x14/0x20
[  168.609893]  tcp_ack+0x414f/0x4760
[  168.613414]  ? ___sys_sendmsg+0x349/0x840
[  168.617537]  ? __sys_sendmmsg+0x152/0x3a0
[  168.621673]  ? do_syscall_64+0x1e8/0x640
[  168.625730]  ? entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  168.631073]  ? tcp_fastretrans_alert+0x2620/0x2620
[  168.635996]  ? save_trace+0x290/0x290
[  168.639780]  tcp_rcv_established+0x3e9/0x1650
[  168.644253]  ? rt6_check_expired+0xa5/0x160
[  168.648549]  ? tcp_data_queue+0x3730/0x3730
[  168.652846]  ? ip6_dst_check+0x16a/0x2c0
[  168.656886]  tcp_v6_do_rcv+0x417/0x1190
[  168.660838]  tcp_v6_rcv+0x2446/0x2ed0
[  168.664612]  ? save_trace+0x290/0x290
[  168.668395]  ip6_input_finish+0x300/0x15a0
[  168.672613]  ip6_input+0xd5/0x340
[  168.676041]  ? ip6_input_finish+0x15a0/0x15a0
[  168.680512]  ? ipv6_rcv+0x16aa/0x1d20
[  168.684295]  ? ip6_rcv_finish+0x7a0/0x7a0
[  168.688422]  ip6_rcv_finish+0x23f/0x7a0
[  168.692374]  ipv6_rcv+0xe4d/0x1d20
[  168.695891]  ? percpu_ida_for_each_free+0x2b8/0x524
[  168.700884]  ? ip6_input+0x340/0x340
[  168.704574]  ? ip6_make_skb+0x410/0x410
[  168.708527]  ? refcount_inc_not_zero+0x88/0xe0
[  168.713086]  ? ip6_input+0x340/0x340
[  168.716779]  __netif_receive_skb_core+0x1eae/0x2ca0
[  168.721773]  ? trace_hardirqs_on+0x10/0x10
[  168.725985]  ? enqueue_to_backlog+0xcc0/0xcc0
[  168.730456]  ? process_backlog+0x43e/0x730
[  168.734668]  ? lock_acquire+0x16f/0x430
[  168.738618]  __netif_receive_skb+0x2c/0x1b0
[  168.742915]  ? __netif_receive_skb+0x2c/0x1b0
[  168.747385]  process_backlog+0x21f/0x730
[  168.751424]  ? mark_held_locks+0xb1/0x100
[  168.755551]  net_rx_action+0x490/0xf80
[  168.759419]  ? napi_complete_done+0x4f0/0x4f0
[  168.763891]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  168.769318]  __do_softirq+0x244/0x9a0
[  168.773097]  ? ip6_finish_output2+0x9c0/0x21b0
[  168.777654]  do_softirq_own_stack+0x2a/0x40
[  168.781953]  </IRQ>
[  168.784167]  do_softirq.part.0+0x10e/0x160
[  168.788375]  __local_bh_enable_ip+0x154/0x1a0
[  168.792847]  ip6_finish_output2+0x9f3/0x21b0
[  168.797232]  ? ip6_forward_finish+0x480/0x480
[  168.801701]  ? __lock_is_held+0xb6/0x140
[  168.805739]  ? check_preemption_disabled+0x3c/0x250
[  168.810744]  ip6_finish_output+0x4f4/0xb50
[  168.814952]  ? ip6_finish_output+0x4f4/0xb50
[  168.819338]  ip6_output+0x20f/0x6d0
[  168.822942]  ? ip6_finish_output+0xb50/0xb50
[  168.827327]  ? __lock_is_held+0xb6/0x140
[  168.831363]  ? check_preemption_disabled+0x3c/0x250
[  168.836355]  ? ip6_fragment+0x32c0/0x32c0
[  168.840480]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[  168.845906]  ip6_xmit+0xd53/0x1eb0
[  168.849425]  ? ip6_finish_output2+0x21b0/0x21b0
[  168.854067]  ? ip6_dst_check+0x116/0x2c0
[  168.858103]  ? save_trace+0x290/0x290
[  168.861879]  ? ip6_append_data+0x2f0/0x2f0
[  168.866092]  ? __lock_is_held+0xb6/0x140
[  168.870129]  ? check_preemption_disabled+0x3c/0x250
[  168.875124]  inet6_csk_xmit+0x286/0x4d0
[  168.879084]  ? inet6_csk_update_pmtu+0x140/0x140
[  168.883814]  ? tcp_md5_do_lookup+0x1d3/0x530
[  168.888202]  __tcp_transmit_skb+0x172c/0x2fe0
[  168.892677]  ? bictcp_cong_avoid+0xe50/0xe50
[  168.897062]  ? __tcp_select_window+0x6e0/0x6e0
[  168.901631]  ? kvm_clock_read+0x23/0x40
[  168.905586]  ? sched_clock_cpu+0x1b/0x1c0
[  168.909709]  ? tcp_small_queue_check+0x184/0x1e0
[  168.914441]  tcp_write_xmit+0x523/0x4960
[  168.918481]  ? iov_iter_advance+0x218/0xc60
[  168.922784]  tcp_push_one+0xc1/0xf0
[  168.926395]  tcp_sendmsg_locked+0x157c/0x3200
[  168.930872]  ? tcp_sendpage+0x60/0x60
[  168.934649]  ? trace_hardirqs_on_caller+0x400/0x590
[  168.939650]  ? trace_hardirqs_on+0xd/0x10
[  168.943781]  tcp_sendmsg+0x30/0x50
[  168.947297]  inet_sendmsg+0x122/0x500
[  168.951073]  ? inet_recvmsg+0x500/0x500
[  168.955022]  sock_sendmsg+0xce/0x110
[  168.958711]  SYSC_sendto+0x206/0x310
[  168.962401]  ? SYSC_connect+0x2d0/0x2d0
[  168.966354]  ? kasan_check_read+0x11/0x20
[  168.970478]  ? _copy_to_user+0x87/0xd0
[  168.974343]  ? put_timespec64+0xb4/0x100
[  168.978381]  ? nsecs_to_jiffies+0x30/0x30
[  168.982510]  ? SyS_clock_gettime+0xf8/0x180
[  168.986829]  SyS_sendto+0x40/0x50
[  168.990257]  ? SyS_getpeername+0x30/0x30
[  168.994296]  do_syscall_64+0x1e8/0x640
[  168.998156]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  169.002976]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  169.008142] RIP: 0033:0x4598e9
[  169.011308] RSP: 002b:00007f0c7e436c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  169.018994] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000004598e9
[  169.026239] RDX: 00000000fffffdda RSI: 00000000200000c0 RDI: 000000000000000b
[  169.033573] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000
[  169.040819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0c7e4376d4
[  169.048062] R13: 00000000004c7880 R14: 00000000004dd188 R15: 00000000ffffffff
[  169.056721] Kernel Offset: disabled
[  169.060336] Rebooting in 86400 seconds..