[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   33.803842] random: sshd: uninitialized urandom read (32 bytes read)
[   33.957955] kauditd_printk_skb: 10 callbacks suppressed
[   33.957963] audit: type=1400 audit(1568572405.814:35): avc:  denied  { map } for  pid=6956 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   34.011911] random: sshd: uninitialized urandom read (32 bytes read)
[   34.582321] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.1.38' (ECDSA) to the list of known hosts.
[   40.173172] random: sshd: uninitialized urandom read (32 bytes read)
2019/09/15 18:33:32 fuzzer started
[   40.366303] audit: type=1400 audit(1568572412.224:36): avc:  denied  { map } for  pid=6966 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   40.634325] random: cc1: uninitialized urandom read (8 bytes read)
2019/09/15 18:33:32 dialing manager at 10.128.0.105:34685
2019/09/15 18:33:33 syscalls: 2466
2019/09/15 18:33:33 code coverage: enabled
2019/09/15 18:33:33 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/09/15 18:33:33 extra coverage: extra coverage is not supported by the kernel
2019/09/15 18:33:33 setuid sandbox: enabled
2019/09/15 18:33:33 namespace sandbox: enabled
2019/09/15 18:33:33 Android sandbox: /sys/fs/selinux/policy does not exist
2019/09/15 18:33:33 fault injection: enabled
2019/09/15 18:33:33 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/09/15 18:33:33 net packet injection: enabled
2019/09/15 18:33:33 net device setup: enabled
[   42.336165] random: crng init done
18:35:23 executing program 5:
bind$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0)

18:35:23 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071")
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0xcc, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0x9, 0x1, 'netem\x00'}, {0x4c, 0x2, {{}, [@TCA_NETEM_RATE64={0xc, 0xa}, @TCA_NETEM_REORDER={0xc, 0xd}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_REORDER={0xc}]}}}, @qdisc_kind_options=@q_htb={{0x0, 0x1, 'htb\x00'}, {0x0, 0x2, [@TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT, @TCA_HTB_DIRECT_QLEN, @TCA_HTB_INIT]}}]}, 0xcc}}, 0x0)

18:35:23 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa07)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffff})
ioctl$TCSETSW(r0, 0x5403, &(0x7f00000001c0))

18:35:23 executing program 2:
listen(0xffffffffffffffff, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000004c0)={0x0, 0x0, 0x2080, {0x0, 0x4000}, [], "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", "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"})
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
lstat(&(0x7f00000003c0)='./file2\x00', 0x0)
syz_mount_image$iso9660(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0)
mknod$loop(0x0, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setfsuid(0x0)
syz_mount_image$msdos(0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000002940)={[{@nodots='nodots'}], [{@euid_eq={'euid'}}]})
open$dir(0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

[  151.473381] audit: type=1400 audit(1568572523.334:37): avc:  denied  { map } for  pid=6984 comm="syz-executor.5" path="/sys/kernel/debug/kcov" dev="debugfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
18:35:23 executing program 4:
socket$inet(0x2, 0x3, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
socketpair(0x5, 0xa, 0x7f, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000880)="0f01c2450f23a6c74424002d2adf1ac74424028b6e777fc7442406000000000f011c24c4225d99ad4c1ef11966baf80cb87039f38cef66bafc0ced66baf80cb81c6d6c86ef66bafc0cedc744240048000000c7442402b3000000c7442406000000000f0114240f07c4433d443f000f07", 0x70}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syncfs(0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200))
dup3(r4, r4, 0x7eb11e307ff20f26)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/4096)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:35:23 executing program 3:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
ftruncate(r1, 0xb4dd)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0))

[  151.790926] IPVS: ftp: loaded support on port[0] = 21
[  152.699073] chnl_net:caif_netlink_parms(): no params data found
[  152.707253] IPVS: ftp: loaded support on port[0] = 21
[  152.741301] bridge0: port 1(bridge_slave_0) entered blocking state
[  152.747935] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.755089] device bridge_slave_0 entered promiscuous mode
[  152.762061] bridge0: port 2(bridge_slave_1) entered blocking state
[  152.768506] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.775536] device bridge_slave_1 entered promiscuous mode
[  152.803175] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  152.812049] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  152.835019] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  152.842423] team0: Port device team_slave_0 added
[  152.851565] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  152.858619] team0: Port device team_slave_1 added
[  152.864321] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  152.871672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  152.890955] IPVS: ftp: loaded support on port[0] = 21
[  152.942176] device hsr_slave_0 entered promiscuous mode
[  153.010295] device hsr_slave_1 entered promiscuous mode
[  153.072763] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  153.081922] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  153.131227] chnl_net:caif_netlink_parms(): no params data found
[  153.158183] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.164685] bridge0: port 2(bridge_slave_1) entered forwarding state
[  153.171487] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.177824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  153.216626] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.224278] IPVS: ftp: loaded support on port[0] = 21
[  153.224360] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.236999] device bridge_slave_0 entered promiscuous mode
[  153.255541] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.262673] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.269645] device bridge_slave_1 entered promiscuous mode
[  153.306328] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  153.331401] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  153.343885] chnl_net:caif_netlink_parms(): no params data found
[  153.369989] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  153.370662] IPVS: ftp: loaded support on port[0] = 21
[  153.377267] team0: Port device team_slave_0 added
[  153.388724] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  153.395868] team0: Port device team_slave_1 added
[  153.401655] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  153.408843] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  153.482203] device hsr_slave_0 entered promiscuous mode
[  153.530402] device hsr_slave_1 entered promiscuous mode
[  153.597256] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  153.606301] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  153.624821] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.631313] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.638159] device bridge_slave_0 entered promiscuous mode
[  153.664023] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  153.670249] 8021q: adding VLAN 0 to HW filter on device bond0
[  153.676892] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.683414] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.690470] device bridge_slave_1 entered promiscuous mode
[  153.713064] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  153.723231] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  153.734169] chnl_net:caif_netlink_parms(): no params data found
[  153.749041] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  153.774437] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.791585] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.798499] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  153.811534] IPVS: ftp: loaded support on port[0] = 21
[  153.820390] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  153.826954] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  153.834330] team0: Port device team_slave_0 added
[  153.839949] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  153.847099] team0: Port device team_slave_1 added
[  153.855282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  153.862552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  153.870494] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  153.882865] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  153.892718] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  153.905648] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  153.912042] 8021q: adding VLAN 0 to HW filter on device team0
[  153.992215] device hsr_slave_0 entered promiscuous mode
[  154.030339] device hsr_slave_1 entered promiscuous mode
[  154.110729] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  154.117756] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  154.127659] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.134093] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.141075] device bridge_slave_0 entered promiscuous mode
[  154.156199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  154.176444] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.183182] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.190231] device bridge_slave_1 entered promiscuous mode
[  154.204389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  154.212323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  154.219891] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.226268] bridge0: port 1(bridge_slave_0) entered forwarding state
[  154.235159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  154.268541] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  154.276656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  154.284385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  154.292075] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.298416] bridge0: port 2(bridge_slave_1) entered forwarding state
[  154.309527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  154.330716] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  154.341822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  154.350958] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  154.376816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  154.385915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  154.395787] chnl_net:caif_netlink_parms(): no params data found
[  154.427618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  154.435809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  154.443946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  154.451967] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  154.459732] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  154.489582] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  154.497485] team0: Port device team_slave_0 added
[  154.503135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  154.510965] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  154.523200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  154.559950] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.569949] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  154.576689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  154.584928] team0: Port device team_slave_1 added
[  154.590165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  154.597625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  154.609355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  154.639133] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  154.647995] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  154.660441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  154.667884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  154.676521] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  154.683008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  154.693108] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.699460] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.707104] device bridge_slave_0 entered promiscuous mode
[  154.719471] chnl_net:caif_netlink_parms(): no params data found
[  154.733988] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  154.783207] device hsr_slave_0 entered promiscuous mode
[  154.820450] device hsr_slave_1 entered promiscuous mode
[  154.860339] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.866703] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.874030] device bridge_slave_1 entered promiscuous mode
[  154.886717] 8021q: adding VLAN 0 to HW filter on device bond0
[  154.898253] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  154.904858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  154.911884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  154.925479] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  154.932541] 8021q: adding VLAN 0 to HW filter on device team0
[  154.941557] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  154.955717] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  154.969029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  154.977685] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  154.986169] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  154.995093] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  155.008294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.016416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.024136] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.030541] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.041506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  155.054268] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.061503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.070994] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.078461] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.084803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.098486] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  155.114274] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  155.122015] team0: Port device team_slave_0 added
[  155.127020] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.133829] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.141549] device bridge_slave_0 entered promiscuous mode
[  155.147942] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  155.154877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  155.163250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.171354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  155.179293] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  155.187922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  155.195357] team0: Port device team_slave_1 added
[  155.201257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  155.208695] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.216503] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.224117] device bridge_slave_1 entered promiscuous mode
[  155.232073] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  155.238243] 8021q: adding VLAN 0 to HW filter on device team0
[  155.244793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.256263] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  155.263463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.278899] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  155.307025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  155.325351] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
18:35:27 executing program 5:
connect$caif(0xffffffffffffffff, 0x0, 0xfffffffffffffce2)
syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800a1695e1dcfe87b1071")
ioctl$FIBMAP(0xffffffffffffffff, 0x2284, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0)
write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount$9p_unix(&(0x7f0000000200)='./file0/f.le.\x00', &(0x7f0000000680)='./file0\x00', &(0x7f0000000a00)='9p\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=unix,aname=-em1)lo@,noextend'])

[  155.374550] device hsr_slave_0 entered promiscuous mode
[  155.401119] device hsr_slave_1 entered promiscuous mode
[  155.450640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  155.458385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  155.466478] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.466834] 9pnet: p9_fd_create_unix (7028): problem connecting socket: ./file0/f.le.: -20
[  155.472899] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.474207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
18:35:27 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000440))
timer_create(0x0, 0x0, 0x0)
r2 = dup(r0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000001)
setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x8000000000000004, &(0x7f0000000140)=0x3, 0x4)
rmdir(0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0xfffffffffffffd79)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockname$netlink(0xffffffffffffffff, 0x0, 0x0)
setns(0xffffffffffffffff, 0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x202, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000180)={0x8000000e})
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
accept(r0, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0x80)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r4, 0x7fff)
sendfile(r2, r4, 0x0, 0x8040fffffffd)

[  155.497533] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.507519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  155.516228] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  155.526246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  155.535728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  155.548282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  155.559483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  155.568093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  155.576454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  155.584415] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.590863] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.597831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  155.605831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  155.614918] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  155.625079] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  155.633725] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  155.646095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  155.655132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  155.663033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  155.670951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  155.689511] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  155.697696] team0: Port device team_slave_0 added
[  155.708735] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  155.716335] team0: Port device team_slave_1 added
[  155.721700] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  155.729005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  155.741969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  155.750704] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.770407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  155.782023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  155.789505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
18:35:27 executing program 5:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00\x02\x00\x00\xea\xff\x00', 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x13, &(0x7f0000000040), 0x14)

[  155.797049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  155.806545] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  155.812826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  155.822315] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  155.829961] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  155.850908] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  155.903647] device hsr_slave_0 entered promiscuous mode
[  155.940366] device hsr_slave_1 entered promiscuous mode
[  155.982106] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  155.991945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  155.999968] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  156.007317] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.017033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.024864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
18:35:27 executing program 5:
socket$inet(0x2, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x20680, 0x0)
socketpair(0x5, 0xa, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000880)="0f01c2450f23a6c74424002d2adf1ac74424028b6e777fc7442406000000000f011c24c4225d99ad4c1ef11966baf80cb87039f38cef66bafc0ced66baf80cb81c6d6c86ef66bafc0cedc744240048000000c7442402b3000000c7442406000000000f0114240f07c4433d443f000f07", 0x70}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mq_open(&(0x7f0000000100)='@bdev!\x00', 0x0, 0x20, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200))
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c)

[  156.033092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  156.045181] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  156.077207] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  156.086539] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  156.097358] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  156.110435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.117403] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.119724] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  156.125329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  156.152082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.165475] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  156.170038] hrtimer: interrupt took 41429 ns
[  156.172281] 8021q: adding VLAN 0 to HW filter on device team0
[  156.190762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.199896] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  156.216968] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  156.226875] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  156.234930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.252187] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.264099] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.270500] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.278151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.292303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  156.301922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  156.317955] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  156.324970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.347452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.356878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.365176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.380899] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.387288] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.400947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  156.423130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.433003] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  156.441829] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.447850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  156.462637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  156.481450] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  156.496011] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  156.505198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  156.514934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  156.524504] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.541153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.548102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.566493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  156.575402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  156.589957] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  156.603234] 8021q: adding VLAN 0 to HW filter on device team0
[  156.611987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  156.620792] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  156.628048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  156.636644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  156.646876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  156.655393] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  156.669470] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  156.678599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
18:35:28 executing program 5:
r0 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040))
close(r0)
connect$tipc(r1, &(0x7f0000000000)=@name, 0x10)

[  156.691256] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  156.702339] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.710479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.722729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
18:35:28 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000400)="11dca50d5c0bcfe47bf070")
recvmmsg(0xffffffffffffffff, &(0x7f0000006180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=""/7, 0x7}}], 0x1, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r1)
sendmsg$netlink(r4, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x14}, 0x0)
recvmmsg(r2, &(0x7f00000038c0), 0x3fffffffffffdf5, 0x62, 0x0)

[  156.746038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  156.760302] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  156.770824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  156.789823] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  156.808379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  156.815917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  156.823761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  156.832895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  156.840551] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.846869] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.856570] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  156.865611] 8021q: adding VLAN 0 to HW filter on device team0
[  156.873246] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  156.880527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  156.888067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
18:35:28 executing program 5:
mount(&(0x7f0000000180)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x40000, &(0x7f0000000100)='eth1\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
creat(0x0, 0x0)
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0)
r0 = socket(0x1, 0x1, 0x0)
perf_event_open(0x0, 0x0, 0xe, 0xffffffffffffffff, 0x1)
pipe2(&(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x0)
ioctl$TIOCGPTPEER(r1, 0x5441, 0x1)
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r2 = syz_open_dev$ndb(0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r0)
ioctl$NBD_DO_IT(r2, 0xab03)

[  156.905037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  156.919117] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  156.925970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  156.939587] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  156.961454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  156.972244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  156.988729] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  157.002182] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.008566] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.016109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  157.029364] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  157.044248] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  157.078269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  157.095968] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  157.106032] block nbd5: Receive control failed (result -22)
[  157.108433] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  157.131115] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.137525] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.144796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.156182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  157.165025] block nbd5: shutting down sockets
[  157.174130] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  157.181063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  157.188646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  157.197563] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.205995] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  157.227094] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'.
[  157.240682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  157.248658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  157.260831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.268986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
18:35:29 executing program 0:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x802103001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r0, 0x38)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x3, 0x2, 0x0, 0x47})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x200001000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070")
ptrace$cont(0x1f, r1, 0x0, 0x0)

[  157.276753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  157.286862] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  157.299451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  157.317485] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.324898] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  157.332999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.345582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.353440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  157.361727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  157.373793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  157.383426] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  157.393675] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  157.401423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.409433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.421443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  157.433773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  157.442656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.450237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.459555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  157.468837] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  157.475572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  157.482862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  157.495203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  157.504796] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  157.511223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
18:35:29 executing program 1:
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0)

18:35:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
creat(&(0x7f0000001c80)='./file0\x00', 0x80)
getitimer(0x0, &(0x7f0000000140))
sendto$inet6(r0, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff)

[  157.536596] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  157.549524] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  157.564147] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.578580] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.620786] protocol 88fb is buggy, dev hsr_slave_0
[  157.626022] protocol 88fb is buggy, dev hsr_slave_1
[  157.740121] protocol 88fb is buggy, dev hsr_slave_0
[  157.745243] protocol 88fb is buggy, dev hsr_slave_1
[  157.759960] protocol 88fb is buggy, dev hsr_slave_0
[  157.765124] protocol 88fb is buggy, dev hsr_slave_1
[  157.860102] protocol 88fb is buggy, dev hsr_slave_0
[  157.865223] protocol 88fb is buggy, dev hsr_slave_1
[  157.990137] protocol 88fb is buggy, dev hsr_slave_0
[  157.995209] protocol 88fb is buggy, dev hsr_slave_1
18:35:30 executing program 0:
r0 = socket(0x2, 0x803, 0xff)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
write$nbd(r0, &(0x7f0000000180)={0x67446698, 0x0, 0x0, 0x0, 0x0, "58f93d945e483790dce6643f"}, 0x1c)

18:35:30 executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x4003)
write$binfmt_script(r0, &(0x7f0000000380)=ANY=[@ANYRESOCT=0x0], 0x17)
close(r0)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340)='/dev/uinput\x00', 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000300)='/deG\xd3\xcc\x7f\x12\x99v/u'], 0x0)
execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000580)=[&(0x7f0000000180)='/dev/uinput\x00'], 0x0)

18:35:30 executing program 5:
syz_open_procfs(0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0xfd})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x3)
socket$unix(0x1, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='!dev\'ptm\x02\x00', 0x663200, 0x0)
fstatfs(r1, &(0x7f00000002c0)=""/163)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a0f, 0x1700)
lseek(0xffffffffffffffff, 0x0, 0xb9cdf381631a91d9)

18:35:30 executing program 1:
prlimit64(0x0, 0x0, 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
pipe(&(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
getdents(r2, &(0x7f0000000000)=""/35, 0x23)
ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000040))
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x2b1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8d0f83a53a0466fd)
clock_gettime(0x0, &(0x7f0000000380)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x44000, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
r4 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0)
r5 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r6 = dup2(r5, r4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x4000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r7, 0xc0a85322, &(0x7f0000000440))
write$P9_RREADDIR(r6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x247)
write$evdev(r6, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0], 0x1})
socket$inet6(0xa, 0x200000000003, 0x4)
r8 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0)
r9 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
dup2(r9, r8)
signalfd4(r9, &(0x7f0000000080)={0x20}, 0x8, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff)

18:35:30 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
creat(&(0x7f0000001c80)='./file0\x00', 0x80)
getitimer(0x0, &(0x7f0000000140))
sendto$inet6(r0, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x306c, 0x4000002, 0x0, 0x2ff)

18:35:30 executing program 4:
socket$inet(0x2, 0x3, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0)
socketpair(0x5, 0xa, 0x7f, &(0x7f0000000040))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000000c0))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000880)="0f01c2450f23a6c74424002d2adf1ac74424028b6e777fc7442406000000000f011c24c4225d99ad4c1ef11966baf80cb87039f38cef66bafc0ced66baf80cb81c6d6c86ef66bafc0cedc744240048000000c7442402b3000000c7442406000000000f0114240f07c4433d443f000f07", 0x70}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syncfs(0xffffffffffffffff)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ptrace$pokeuser(0x6, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200))
dup3(r4, r4, 0x7eb11e307ff20f26)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/4096)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

18:35:30 executing program 0:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="030400000a00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x6c, 0x0, 0x0, 0x0)

18:35:30 executing program 3:
pipe(0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$evdev(0x0, 0x1, 0x1)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0)
timerfd_create(0x8, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000580)={0x8, "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", 0x1000}, 0x10000005c)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000003c0)={0x0, 0x1, 0x0, 'queue1\x00'})
write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000091fa8)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001700)}}], 0x40000e5, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)

[  159.265993] audit: type=1400 audit(1568572531.124:38): avc:  denied  { wake_alarm } for  pid=7176 comm="syz-executor.3" capability=35  scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
18:35:31 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)

18:35:31 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffeb0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10)
ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000080)={{0x2, 0x4e20, @empty}, {0xf0ab4d578daa4e70, @random="54a3b7df63c8"}, 0x0, {0x2, 0x4e24, @remote}, 'vxcan1\x00'})

18:35:31 executing program 0:
r0 = socket$kcm(0xa, 0x5, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3c)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r0})

[  159.570177] audit: type=1804 audit(1568572531.424:39): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir088250795/syzkaller.02UVfS/8/memory.events" dev="sda1" ino=16554 res=1
[  159.673341] ==================================================================
[  159.680857] BUG: KASAN: use-after-free in tcp_init_tso_segs+0x1ae/0x200
[  159.687618] Read of size 2 at addr ffff8880845370b0 by task syz-executor.1/7190
[  159.695057] 
[  159.696687] CPU: 1 PID: 7190 Comm: syz-executor.1 Not tainted 4.14.143 #0
[  159.703608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  159.714100] Call Trace:
[  159.716691]  dump_stack+0x138/0x197
[  159.720360]  ? tcp_init_tso_segs+0x1ae/0x200
[  159.724773]  print_address_description.cold+0x7c/0x1dc
[  159.730056]  ? tcp_init_tso_segs+0x1ae/0x200
[  159.734463]  kasan_report.cold+0xa9/0x2af
[  159.738621]  __asan_report_load2_noabort+0x14/0x20
[  159.743547]  tcp_init_tso_segs+0x1ae/0x200
[  159.747779]  ? tcp_tso_segs+0x7d/0x1c0
[  159.751662]  tcp_write_xmit+0x15e/0x4960
[  159.755721]  ? tcp_v4_md5_lookup+0x23/0x30
[  159.759954]  ? tcp_established_options+0x2c5/0x420
[  159.764886]  ? tcp_current_mss+0x1dc/0x2f0
[  159.769125]  ? __alloc_skb+0x3ee/0x500
[  159.773013]  __tcp_push_pending_frames+0xa6/0x260
[  159.777851]  tcp_send_fin+0x17e/0xc40
[  159.781649]  tcp_close+0xcc8/0xfb0
[  159.785189]  ? __sock_release+0x89/0x2b0
[  159.789248]  ? ip_mc_drop_socket+0x1d6/0x230
[  159.793655]  inet_release+0xec/0x1c0
[  159.797370]  __sock_release+0xce/0x2b0
[  159.801252]  ? __sock_release+0x2b0/0x2b0
[  159.805392]  sock_close+0x1b/0x30
[  159.808843]  __fput+0x275/0x7a0
[  159.812124]  ____fput+0x16/0x20
[  159.815398]  task_work_run+0x114/0x190
[  159.819284]  exit_to_usermode_loop+0x1da/0x220
18:35:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$isdn(0x22, 0x3, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd)
syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x109401)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r1}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}})

[  159.823867]  do_syscall_64+0x4bc/0x640
[  159.827749]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  159.832608]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  159.837790] RIP: 0033:0x4135d1
[  159.840971] RSP: 002b:00007ffef362f620 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  159.848673] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1
[  159.848683] RDX: 0000001b30b20000 RSI: 0000000000000000 RDI: 0000000000000003
[  159.848688] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf
[  159.848692] R10: 00007ffef362f700 R11: 0000000000000293 R12: 000000000075bf20
[  159.848698] R13: 0000000000026fb3 R14: 0000000000760590 R15: ffffffffffffffff
[  159.848711] 
[  159.848716] Allocated by task 7193:
[  159.848726]  save_stack_trace+0x16/0x20
[  159.848732]  save_stack+0x45/0xd0
[  159.848736]  kasan_kmalloc+0xce/0xf0
[  159.848740]  kasan_slab_alloc+0xf/0x20
[  159.848747]  kmem_cache_alloc_node+0x144/0x780
[  159.848753]  __alloc_skb+0x9c/0x500
[  159.848759]  sk_stream_alloc_skb+0xb3/0x780
[  159.870628]  tcp_sendmsg_locked+0xf61/0x3200
[  159.870634]  tcp_sendmsg+0x30/0x50
[  159.870642]  inet_sendmsg+0x122/0x500
[  159.870649]  sock_sendmsg+0xce/0x110
[  159.870656]  SYSC_sendto+0x206/0x310
[  159.870661]  SyS_sendto+0x40/0x50
[  159.870670]  do_syscall_64+0x1e8/0x640
[  159.870678]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  159.870683] 
[  159.951042] Freed by task 7193:
[  159.951055]  save_stack_trace+0x16/0x20
[  159.951062]  save_stack+0x45/0xd0
[  159.951067]  kasan_slab_free+0x75/0xc0
[  159.951075]  kmem_cache_free+0x83/0x2b0
[  159.951082]  kfree_skbmem+0x8d/0x120
18:35:31 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$isdn(0x22, 0x3, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000400)={'syz'}, &(0x7f00000001c0)="04", 0x1, 0xfffffffffffffffd)
syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x109401)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r0, r1}, 0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={'sha384-generic\x00\n\x00'}})

[  159.951089]  __kfree_skb+0x1e/0x30
[  159.951097]  tcp_remove_empty_skb.part.0+0x231/0x2e0
[  159.951103]  tcp_sendmsg_locked+0x1ced/0x3200
[  159.961823]  tcp_sendmsg+0x30/0x50
[  159.961831]  inet_sendmsg+0x122/0x500
[  159.961839]  sock_sendmsg+0xce/0x110
[  159.961845]  SYSC_sendto+0x206/0x310
[  159.961851]  SyS_sendto+0x40/0x50
[  159.961859]  do_syscall_64+0x1e8/0x640
[  159.961869]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  159.981992] 
[  159.982001] The buggy address belongs to the object at ffff888084537080
[  159.982001]  which belongs to the cache skbuff_fclone_cache of size 472
[  159.989994] The buggy address is located 48 bytes inside of
[  159.989994]  472-byte region [ffff888084537080, ffff888084537258)
[  159.989998] The buggy address belongs to the page:
[  160.045392] page:ffffea0002114dc0 count:1 mapcount:0 mapping:ffff888084537080 index:0x0
[  160.053530] flags: 0x1fffc0000000100(slab)
[  160.057749] raw: 01fffc0000000100 ffff888084537080 0000000000000000 0000000100000006
[  160.065642] raw: ffffea0002334a60 ffffea000219bd20 ffff8880a9e19a80 0000000000000000
[  160.073500] page dumped because: kasan: bad access detected
[  160.079186] 
[  160.080788] Memory state around the buggy address:
[  160.085693]  ffff888084536f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  160.093030]  ffff888084537000: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  160.100377] >ffff888084537080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.107720]                                      ^
[  160.112624]  ffff888084537100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
18:35:32 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r1)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
fdatasync(r0)

18:35:32 executing program 5:
syz_open_procfs(0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x40)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000000)={0xfd})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080), 0x1, 0x3)
socket$unix(0x1, 0x0, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='!dev\'ptm\x02\x00', 0x663200, 0x0)
fstatfs(r1, &(0x7f00000002c0)=""/163)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x20032600)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a0f, 0x1700)
lseek(0xffffffffffffffff, 0x0, 0xb9cdf381631a91d9)

[  160.119960]  ffff888084537180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  160.127294] ==================================================================
[  160.134628] Disabling lock debugging due to kernel taint
18:35:32 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001c40)=""/246)
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
syz_genetlink_get_family_id$tipc(0x0)
sendfile(r0, r1, 0x0, 0x102002700)

[  160.227729] audit: type=1800 audit(1568572531.424:40): pid=7172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="memory.events" dev="sda1" ino=16554 res=0
[  160.272491] Kernel panic - not syncing: panic_on_warn set ...
[  160.272491] 
[  160.276411] kobject: 'ppp0' (ffff88805ca153b0): kobject_add_internal: parent: 'net', set: 'devices'
[  160.279902] CPU: 1 PID: 7190 Comm: syz-executor.1 Tainted: G    B           4.14.143 #0
[  160.279907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  160.279909] Call Trace:
[  160.279923]  dump_stack+0x138/0x197
[  160.279934]  ? tcp_init_tso_segs+0x1ae/0x200
[  160.279940]  panic+0x1f2/0x426
[  160.279946]  ? add_taint.cold+0x16/0x16
[  160.279956]  ? ___preempt_schedule+0x16/0x18
[  160.279966]  kasan_end_report+0x47/0x4f
[  160.279972]  kasan_report.cold+0x130/0x2af
[  160.279982]  __asan_report_load2_noabort+0x14/0x20
[  160.304597] kobject: 'ppp0' (ffff88805ca153b0): kobject_uevent_env
[  160.306645]  tcp_init_tso_segs+0x1ae/0x200
[  160.306652]  ? tcp_tso_segs+0x7d/0x1c0
[  160.306660]  tcp_write_xmit+0x15e/0x4960
[  160.306666]  ? tcp_v4_md5_lookup+0x23/0x30
[  160.306673]  ? tcp_established_options+0x2c5/0x420
[  160.306682]  ? tcp_current_mss+0x1dc/0x2f0
[  160.306691]  ? __alloc_skb+0x3ee/0x500
[  160.306704]  __tcp_push_pending_frames+0xa6/0x260
[  160.309654] kobject: 'ppp0' (ffff88805ca153b0): fill_kobj_path: path = '/devices/virtual/net/ppp0'
[  160.312887]  tcp_send_fin+0x17e/0xc40
[  160.312894]  tcp_close+0xcc8/0xfb0
[  160.312900]  ? __sock_release+0x89/0x2b0
[  160.312908]  ? ip_mc_drop_socket+0x1d6/0x230
[  160.312916]  inet_release+0xec/0x1c0
[  160.312922]  __sock_release+0xce/0x2b0
[  160.312929]  ? __sock_release+0x2b0/0x2b0
[  160.312934]  sock_close+0x1b/0x30
[  160.312942]  __fput+0x275/0x7a0
[  160.312952]  ____fput+0x16/0x20
[  160.312961]  task_work_run+0x114/0x190
[  160.312976]  exit_to_usermode_loop+0x1da/0x220
[  160.322120] kobject: 'queues' (ffff88809ba37448): kobject_add_internal: parent: 'ppp0', set: '<NULL>'
[  160.324491]  do_syscall_64+0x4bc/0x640
[  160.324497]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  160.324509]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  160.324515] RIP: 0033:0x4135d1
[  160.324518] RSP: 002b:00007ffef362f620 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  160.324525] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004135d1
[  160.324530] RDX: 0000001b30b20000 RSI: 0000000000000000 RDI: 0000000000000003
[  160.324534] RBP: 0000000000000001 R08: 000000006e783fbb R09: 000000006e783fbf
[  160.324538] R10: 00007ffef362f700 R11: 0000000000000293 R12: 000000000075bf20
[  160.324542] R13: 0000000000026fb3 R14: 0000000000760590 R15: ffffffffffffffff
[  160.330292] Kernel Offset: disabled
[  160.512355] Rebooting in 86400 seconds..