[   31.012682] kauditd_printk_skb: 8 callbacks suppressed
[   31.012688] audit: type=1800 audit(1572941518.336:33): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0
[   31.039662] audit: type=1800 audit(1572941518.336:34): pid=6755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   35.543245] random: sshd: uninitialized urandom read (32 bytes read)
[   35.726926] audit: type=1400 audit(1572941523.046:35): avc:  denied  { map } for  pid=6930 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   35.765886] random: sshd: uninitialized urandom read (32 bytes read)
[   36.371399] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.111' (ECDSA) to the list of known hosts.
[   41.852237] random: sshd: uninitialized urandom read (32 bytes read)
2019/11/05 08:12:09 fuzzer started
[   42.049869] audit: type=1400 audit(1572941529.366:36): avc:  denied  { map } for  pid=6939 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16482 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   42.846467] random: cc1: uninitialized urandom read (8 bytes read)
2019/11/05 08:12:11 dialing manager at 10.128.0.105:41191
2019/11/05 08:12:11 syscalls: 2529
2019/11/05 08:12:11 code coverage: enabled
2019/11/05 08:12:11 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/11/05 08:12:11 extra coverage: extra coverage is not supported by the kernel
2019/11/05 08:12:11 setuid sandbox: enabled
2019/11/05 08:12:11 namespace sandbox: enabled
2019/11/05 08:12:11 Android sandbox: /sys/fs/selinux/policy does not exist
2019/11/05 08:12:11 fault injection: enabled
2019/11/05 08:12:11 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/11/05 08:12:11 net packet injection: enabled
2019/11/05 08:12:11 net device setup: enabled
2019/11/05 08:12:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2019/11/05 08:12:11 devlink PCI setup: PCI device 0000:00:10.0 is not available
[   44.992489] random: crng init done
08:13:18 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:18 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

08:13:18 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000049c0), &(0x7f00000051c0)=0x4)

08:13:18 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:18 executing program 4:
socket$inet6(0xa, 0x1, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00')
r0 = gettid()
tkill(r0, 0x3c)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r1 = getpid()
sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000059, 0x0, 0x0)
pipe(&(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x0)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000200)={{0xdbfe2afe8f30ef0b, 0x0, @descriptor="ee8443c0a496dd2c"}})
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r5, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

[  111.437530] audit: type=1400 audit(1572941598.756:37): avc:  denied  { map } for  pid=6956 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
08:13:18 executing program 5:
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22913}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
r1 = eventfd(0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r4, 0x0)
fanotify_init(0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r5, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x0, 0x0)
epoll_create1(0x140000)
r6 = dup(r1)
fanotify_mark(r5, 0x0, 0x10, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
eventfd(0x0)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r1, 0x20000000, 0x2, r0})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

[  111.611891] IPVS: ftp: loaded support on port[0] = 21
[  112.198651] IPVS: ftp: loaded support on port[0] = 21
[  112.247771] chnl_net:caif_netlink_parms(): no params data found
[  112.274646] IPVS: ftp: loaded support on port[0] = 21
[  112.328494] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.335172] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.342529] device bridge_slave_0 entered promiscuous mode
[  112.351116] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.357460] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.364272] device bridge_slave_1 entered promiscuous mode
[  112.382893] chnl_net:caif_netlink_parms(): no params data found
[  112.412640] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  112.421611] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  112.434410] IPVS: ftp: loaded support on port[0] = 21
[  112.454699] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  112.462035] team0: Port device team_slave_0 added
[  112.469097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  112.477249] team0: Port device team_slave_1 added
[  112.491640] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  112.498672] bridge0: port 1(bridge_slave_0) entered blocking state
[  112.505151] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.512810] device bridge_slave_0 entered promiscuous mode
[  112.520825] bridge0: port 2(bridge_slave_1) entered blocking state
[  112.527160] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.535627] device bridge_slave_1 entered promiscuous mode
[  112.554228] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  112.562070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  112.569751] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  112.588949] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  112.596517] team0: Port device team_slave_0 added
[  112.615726] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  112.622820] team0: Port device team_slave_1 added
[  112.701949] device hsr_slave_0 entered promiscuous mode
[  112.760322] device hsr_slave_1 entered promiscuous mode
[  112.822371] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  112.829274] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  112.838547] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  112.855471] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  112.941881] device hsr_slave_0 entered promiscuous mode
[  112.980288] device hsr_slave_1 entered promiscuous mode
[  113.050576] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  113.057660] chnl_net:caif_netlink_parms(): no params data found
[  113.069745] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  113.070242] IPVS: ftp: loaded support on port[0] = 21
[  113.081008] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.088103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.094938] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.101308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.200410] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.206802] bridge0: port 2(bridge_slave_1) entered forwarding state
[  113.213450] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.219799] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.227368] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.234933] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.242057] device bridge_slave_0 entered promiscuous mode
[  113.254172] chnl_net:caif_netlink_parms(): no params data found
[  113.282243] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.288746] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.296369] device bridge_slave_1 entered promiscuous mode
[  113.315549] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.322729] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.323608] IPVS: ftp: loaded support on port[0] = 21
[  113.338391] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.345120] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.372641] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  113.408457] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.415283] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.422542] device bridge_slave_0 entered promiscuous mode
[  113.441597] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  113.478118] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.485760] bridge0: port 2(bridge_slave_1) entered blocking state
[  113.492438] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.499268] device bridge_slave_1 entered promiscuous mode
[  113.540108] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  113.547781] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  113.559357] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  113.566822] team0: Port device team_slave_0 added
[  113.581498] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.587853] chnl_net:caif_netlink_parms(): no params data found
[  113.598492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.605907] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  113.617327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  113.625399] team0: Port device team_slave_1 added
[  113.632761] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  113.648138] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  113.657301] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  113.663597] 8021q: adding VLAN 0 to HW filter on device team0
[  113.671885] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  113.680093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  113.742876] device hsr_slave_0 entered promiscuous mode
[  113.790513] device hsr_slave_1 entered promiscuous mode
[  113.861097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  113.868272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  113.877760] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  113.884899] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  113.908968] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  113.917249] team0: Port device team_slave_0 added
[  113.923277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.931625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.939199] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.945747] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.952751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  113.959854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  113.968726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  113.977606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  113.996372] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  114.003782] team0: Port device team_slave_1 added
[  114.009817] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  114.016219] 8021q: adding VLAN 0 to HW filter on device team0
[  114.023236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.032723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.040349] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.046812] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.056957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  114.067233] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.073771] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.081049] device bridge_slave_0 entered promiscuous mode
[  114.087587] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  114.097616] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  114.105021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  114.114650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.122275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  114.129893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  114.138002] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.144508] bridge0: port 1(bridge_slave_0) entered forwarding state
[  114.153029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  114.160367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.170367] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.176808] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.185106] device bridge_slave_1 entered promiscuous mode
[  114.204131] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  114.272782] device hsr_slave_0 entered promiscuous mode
[  114.310455] device hsr_slave_1 entered promiscuous mode
[  114.382433] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  114.394848] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  114.405899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.413881] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.421490] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.427946] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.436375] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  114.443559] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  114.462305] chnl_net:caif_netlink_parms(): no params data found
[  114.472192] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  114.480931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.488804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.496930] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.512271] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  114.523012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  114.531228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  114.540640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  114.547931] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  114.555359] team0: Port device team_slave_0 added
[  114.562429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  114.569488] team0: Port device team_slave_1 added
[  114.595825] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.603923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.612902] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.620529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.627929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.636639] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  114.646339] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  114.654741] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  114.661402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.669832] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  114.678961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  114.689328] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  114.695440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  114.703497] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  114.714385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  114.732261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.739709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  114.747406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.755235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.763440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.776733] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  114.798263] bridge0: port 1(bridge_slave_0) entered blocking state
[  114.804910] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.812272] device bridge_slave_0 entered promiscuous mode
[  114.826840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  114.883543] device hsr_slave_0 entered promiscuous mode
[  114.960724] device hsr_slave_1 entered promiscuous mode
[  115.000985] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  115.008535] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  115.015300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  115.023257] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  115.031146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  115.037822] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  115.045011] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.052085] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.058918] device bridge_slave_1 entered promiscuous mode
[  115.073378] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  115.080998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  115.088433] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  115.098986] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  115.115614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  115.126656] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.137915] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  115.146991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  115.155605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.172168] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  115.178444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.189572] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  115.228058] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.238426] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.253368] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  115.259803] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  115.267789] team0: Port device team_slave_0 added
[  115.277301] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  115.287159] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  115.296327] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  115.303730] team0: Port device team_slave_1 added
[  115.308922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  115.318135] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  115.328500] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  115.336305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  115.353293] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  115.362486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  115.369427] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  115.377114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.384776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.392952] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
08:13:22 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

[  115.433269] device hsr_slave_0 entered promiscuous mode
08:13:22 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:22 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:22 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

[  115.481367] device hsr_slave_1 entered promiscuous mode
[  115.515064] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  115.521814] 8021q: adding VLAN 0 to HW filter on device team0
08:13:22 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

[  115.535025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.545306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.556059] 8021q: adding VLAN 0 to HW filter on device batadv0
[  115.566540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
08:13:22 executing program 0:
syz_emit_ethernet(0x0, 0x0, 0x0)

[  115.581438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  115.598797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.619103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.628823] bridge0: port 1(bridge_slave_0) entered blocking state
08:13:22 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

[  115.635409] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.642707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.652365] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  115.661829] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  115.668092] 8021q: adding VLAN 0 to HW filter on device team0
[  115.696946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  115.722730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[  115.731044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.752621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.765921] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.772317] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.784401] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  115.795151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  115.812499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.820693] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.828986] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.835756] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.843934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.852081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  115.859766] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.866163] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.873543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  115.888169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  115.901676] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  115.916570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  115.928145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  115.939550] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.949378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  115.958777] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  115.968938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  115.977545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  115.986261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  116.005903] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  116.015851] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  116.025372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.033108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.041007] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.051999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  116.060985] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  116.068328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.076188] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.084149] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.091343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.099074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.107286] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
08:13:23 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  116.116541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  116.123895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  116.135190] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  116.142685] 8021q: adding VLAN 0 to HW filter on device team0
[  116.156559] 8021q: adding VLAN 0 to HW filter on device bond0
[  116.165244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.173418] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.184133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.193656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.203872] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  116.215042] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  116.223643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.231936] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.239299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  116.247626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.255510] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.262044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.270407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  116.278545] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  116.285912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.292977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.300586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.309930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  116.316872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  116.327472] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[  116.335644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  116.345097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.354306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.361900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  116.368929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  116.377177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.384828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.392757] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.399116] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.406972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  116.418032] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  116.424374] 8021q: adding VLAN 0 to HW filter on device team0
[  116.432524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  116.440530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.447931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.455672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  116.464523] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  116.470881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  116.479844] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  116.488214] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  116.494746] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  116.502928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  116.514739] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[  116.526791] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  116.536614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  116.544720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.552524] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.559047] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.566552] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.576756] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  116.585190] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  116.594683] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  116.602559] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.609229] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.616544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.624184] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.632394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.640220] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.647835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.656634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[  116.667289] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.676085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  116.687828] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  116.695296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.705317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.713317] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.719797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.727232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.734762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.744184] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[  116.753282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  116.761836] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  116.772400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  116.781609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.789030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.797914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.805561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.814077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[  116.829268] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  116.835881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  116.846601] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.855497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  116.866963] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[  116.880389] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  116.887008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.896741] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.905631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.914555] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  116.926413] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.933426] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.941029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[  116.955218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[  116.962983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.971072] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.978647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.986341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.997019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.011261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[  117.018274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  117.026368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.039174] audit: type=1400 audit(1572941604.356:38): avc:  denied  { create } for  pid=7039 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  117.039999] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
08:13:24 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)}, {&(0x7f0000001300)="af22d7abc7c99cd0ef7f7993f68393e8cac585de7b6f1dd7ca5a4ca1fa16dc2d26a79148114bab1baa462f55fe25c5520c5f464b00b9caa57f1a3d02331b336ff6389772986130ed809ebd61c20945f06118c159fa237fa5b72048f84c9ab257d8e3b8e4edc6fcbfc4a1a40d830b4f2964c5d31e1afd70ef294261f77037355b19f00b2120a12b27c38965d395f8236511e338975209a91a", 0x98}], 0x2}}], 0x1, 0x4001)
ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x8000, 0x0)
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xa3}, 0x0, 0x8, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42})
r2 = memfd_create(&(0x7f00000006c0)='+o.cpusZt\xd3\xc1]\xe8<\xb6dB\xba\xf6\x15\x9b\x9bvbot1&\x00', 0x1)
r3 = dup2(0xffffffffffffffff, r2)
ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000100))
ioctl$TUNSETLINK(r3, 0x400454cd, 0x483)
r4 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0)
r5 = dup2(0xffffffffffffffff, r4)
ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000100))
write$P9_RAUTH(r5, &(0x7f00000000c0)={0x14, 0x67, 0x2, {0x80, 0x3, 0x8}}, 0x14)
getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f0000000500)={'nat\x00'}, &(0x7f0000000580)=0x78)
r6 = getpid()
sched_setattr(r6, &(0x7f00000005c0)={0x30, 0x1, 0x0, 0x2, 0x8000, 0x4, 0xfffffffffffffffe, 0xfffffffffffffff4}, 0x0)
ptrace$getregset(0x4204, r6, 0x100, &(0x7f0000000180)={&(0x7f0000000040)=""/87, 0x57})
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0xfffffe38)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000004c0)={0x1, 0xb50, 0x3, 0xbb, &(0x7f00000002c0)=""/187, 0x15, &(0x7f0000000380)=""/21, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)

[  117.075631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  117.077148] audit: type=1400 audit(1572941604.396:39): avc:  denied  { getopt } for  pid=7039 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  117.091547] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  117.128242] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[  117.136484] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.144730] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.170765] 8021q: adding VLAN 0 to HW filter on device batadv0
08:13:24 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

[  117.240055] hrtimer: interrupt took 53825 ns
08:13:24 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

[  117.326002] devpts: called with bogus options
[  118.617080] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
08:13:26 executing program 5:
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22913}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
r1 = eventfd(0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r4, 0x0)
fanotify_init(0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r5, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x0, 0x0)
epoll_create1(0x140000)
r6 = dup(r1)
fanotify_mark(r5, 0x0, 0x10, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
eventfd(0x0)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r1, 0x20000000, 0x2, r0})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

08:13:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

08:13:26 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[])
stat(&(0x7f00000002c0)='./file0/file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00')

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x0, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 1:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00')
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendfile(r1, r0, 0x0, 0x7ffff000)

08:13:26 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

[  118.757010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  118.771913] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
08:13:26 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 1:
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22913}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
r1 = eventfd(0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r4, 0x0)
fanotify_init(0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r5, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x0, 0x0)
epoll_create1(0x140000)
r6 = dup(r1)
fanotify_mark(r5, 0x0, 0x10, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
eventfd(0x0)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r1, 0x20000000, 0x2, r0})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  118.836521] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
[  118.843009] syz-executor.0 (7096) used greatest stack depth: 24064 bytes left
[  118.854163] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
08:13:26 executing program 4:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[])
stat(&(0x7f00000002c0)='./file0/file0\x00', 0x0)
r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000080)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00')

[  118.926489] overlayfs: maximum fs stacking depth exceeded
[  118.932901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  118.941890] overlayfs: maximum fs stacking depth exceeded
08:13:26 executing program 5:
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22913}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
r1 = eventfd(0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r4, 0x0)
fanotify_init(0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r5, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x0, 0x0)
epoll_create1(0x140000)
r6 = dup(r1)
fanotify_mark(r5, 0x0, 0x10, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
eventfd(0x0)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r1, 0x20000000, 0x2, r0})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

08:13:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
dup(r1)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

08:13:26 executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0x2b, 0x0, @remote, @local, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
poll(&(0x7f00000000c0)=[{r0, 0x404}], 0x1, 0x0)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

[  119.086815] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  119.121989] overlayfs: fs on 'file0' does not support file handles, falling back to index=off.
08:13:26 executing program 1:
socket$inet6_tcp(0xa, 0x1, 0x0)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
dup(r1)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

08:13:26 executing program 4:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0x5)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
splice(r1, 0x0, r0, 0x0, 0xe105, 0x0)

08:13:26 executing program 5:
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x22913}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
r1 = eventfd(0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
r3 = epoll_create1(0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r4, 0x0)
fanotify_init(0x0, 0x0)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x51, 0x10, r5, 0x0)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fanotify_init(0x0, 0x0)
epoll_create1(0x140000)
r6 = dup(r1)
fanotify_mark(r5, 0x0, 0x10, r6, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
eventfd(0x0)
ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r1, 0x20000000, 0x2, r0})
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4)

08:13:26 executing program 1:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = eventfd(0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
fanotify_init(0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fanotify_init(0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0)
epoll_create1(0x0)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r0, 0x0, 0x2})

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x0, 0xce}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

[  119.286050] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
08:13:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
dup(r1)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000001c80)='attr//eycr/at\xdfr')

08:13:26 executing program 1:
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00')
getdents(r1, &(0x7f00000000c0)=""/65, 0x41)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ea0000008000000000cbc624877c8252c28f5e87a64820546a1ebe1f6adb3b91e7f1ffd7e4ab569f8eb9808e0b61a0bf7a301ffe8dac0773d9e5411f2b25f3fbc7cf9482c1f0d81a590ed76f2c4af37bd3d331de23d61ca62ef8d48f42ffd913acf060c10300000082fc399eaab8787f0dd1510490b0f420326bcc4e2b65e7c68bacee7877a6274d908e5a5d512b87ed3eb24d00d331edbedf8a03a722ffa87cc2dfec4758b087c23cc9c5e726fea942494855", @ANYPTR64, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="e6c55c5d9eb82ee4510100010029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5", @ANYRESDEC], 0x0, 0x13f}, 0x20)
tkill(r0, 0x39)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 5:
sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0, 0xffffffffffffff3f}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="020d0000100000002f3144e800000000030006000720000002004000e0000001000000f5000000000800120002000100000000000000000030006c000203009f7eae02000000adb20200000000152c000000000000000001020014bb000000006d8001e20000000003000500002000000200ed00e0000001000000ba0000000083e30f510b958efd6eadf315615ce3a044152ea8bb570e2a78cb90d951c0af8345a652d3f8b063daeb15b119f58d2b220046820cd437fb9525e63abd1f39479d824920968cd59f74db363a6d8064e7b175a7ba7184cef93a0fcc835820d96008f866fb4d28bc7ef9f8062f9db56c8128159cdcfd0c171bcf9e868c603d7f85424bd8c5d2da31c2962ca4c9b80600bd45d8b6f661130c526af032741a8eebb41e495669dd7f1237cc427d1d35826f68073a43795ed66df2f2d4bff069f7d039c721484d64363829137869865cce84240b9ec5cf24af907a440931d08e9e65d7b8597e57292ac7c4f1c02db1c2e4f7104d1a982cf40045d0f4431963df216018cd0072bdcb3d5892b7b45695d5f782adaeac178f69a3247fd3bf2908eb0c54eb5c5f0a06506931e7602dd1f0134fad0bd65b5008c249706ea978f16437e0aa62e6c36f88098cd95abdcc5f2dfcb35d123f85d75f400d25928aab75c854502f01000100000000007a6845de7f93684d20e40fbcc782f4d4105f6512a39875e6e543defe12c0a79fb6b74d4a59802cd01276d5ccf2044a28b928f9d8b00b8609dd2ce899228509c49f9fe74fc9de22ea49b934f40ae18968cb1123d562ec4834bcbfe5d389dba66e268afb679090614652c1d8a633093015bdc8edc11bae372c83640cf812f55533de7d3421af7bd85059fec6aaf9a881f56908ef619948eac304a6dd5dae540f0e478f72c7ed60240fd9e5fd847771e4c978c2b039cefc2566be2f0655395d495c6eff1914832e513fe5b0a428195bd0e8186eba1800000000000000000000000000006351378bc1d74702a0c950765d822259357b5aa5377b4c97984e241d9ffded5af1fbadb5b5bdd52a7f84427796ee9bc70405453e93ae4ebed8405af1fbb6b237cbf2b950b63fb45d12bea8e8d2ee591ecf871ea5c15b294785cfbdf5d4adc9467535a8a06ed062b155dfe1c715447a0f6ee54a43281bd5f0850cfeec987364c540bb316af2c4cb07ed2c3e20a93ee852ce088319166f191e50c94d9863c5bc90590c792d5850e1e0e3cef86808c10122fe287797ceefdc491e5db5cd0731a18a513234004f613d592cfdaf66c2e92c7b1ad6bd29d16124a67502c343a72a3d06168a040000000000000048fa4807c6be3beb1982d25e1af301430823fe2e85fef29da504d745641657e3db8512abd2981792cef69ba2f7415101cb0f4b1c417d3896f832374378b396fbe50cfa9e7e539159bca09cd839e0054845254da70dd36d764b2406585728c83a34d57ecb571f24054f0dbf8ed327bb102b1b1bb03bf572cfef6d4e36d6615ed08accf4b1df3a1add28c3117e04b4031659bc4572ac7e2945b93c72352dcf4bdc890b2f2f3d3e101565916ec651ed60ecc9cdead0c88fc49775135ce1283edbf32bc4e412d05357866163a890b9f5c37e73e256ce50bc75a5bb45b6b30a1373292dcbf133f99f9483dde4112105624569b2d930bb30905742e3dd79880ded7e39abb41454a6874ac39179cca28fa40400ffc234e0b489c40601f4f92a96a37ddb75102463147fda7bb582f58767ddad69938e44cd126cdd69cd31b16bb70283edb72f7aafc248039b63beb7cdc1e9d59369aeb58808d1e488ee51b247eaf287c28d0a3347a1421b5a16f601160f568595a1940c12222b5c2976080f111fcecab95df709b66413d70cd784"], 0x80}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmmsg(r0, &(0x7f00000000c0), 0x2c8, 0x0)

[  119.466942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
08:13:26 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:26 executing program 4:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r4, 0x0)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[], 0xffdc)

08:13:26 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

08:13:26 executing program 0:
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x10, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

08:13:26 executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00')
unlink(&(0x7f0000000040)='./file0\x00')

[  119.554751] ptrace attach of "/root/syz-executor.1"[7183] was attempted by "/root/syz-executor.1"[7185]
08:13:27 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8)
connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f000081e000)=ANY=[@ANYRES32=0x0, @ANYBLOB="0293e0d3"], 0x8)

08:13:27 executing program 5:
r0 = getpid()
sched_setattr(r0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
acct(&(0x7f0000000000)='./file0\x00')
memfd_create(0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback={0x4f210}})

[  119.659381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
08:13:27 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0x9)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockname(r0, 0x0, &(0x7f0000000380))

08:13:27 executing program 0:
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)={@multicast1, @local, 0x0, 0x7, [@empty, @loopback, @local, @multicast2, @loopback, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, 0x2c)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00')
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0)
write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0)
pread64(r2, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000300))
socket$inet6(0xa, 0x0, 0x0)

08:13:27 executing program 1:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28000000000000000000", 0x1c)
recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700), 0xc, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x8000)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000700)={0x0, 0xf29, 0xdb9, 0x3})
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = dup(r2)
setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r4=>0x0})
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x88)
setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000040), 0x4)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="dde056b5586b298d486e9d3492cb929c7194fdde36b6d07589a605b8bc9cda93a1bb487d51014e14c8ba7fd7f27fd1b24fd4f48d3c57be111b", 0x39}, {&(0x7f0000000080)}, {&(0x7f0000000300)}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)}, {&(0x7f0000000d00)}], 0x2}}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002300)="82c335772ebf1fdf35a39916ff3dcdbf2b8d9c02eedb20587663fe59788b346f38739af8e073f62d86e954c1f8a03087c47f093388f7d849e4a41077491e284b6e753c4211", 0x45}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8000)
r6 = socket(0x10, 0x3, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a009b8a14000000ff0000adf87e28", 0x13)
sendmsg$IPVS_CMD_GET_INFO(r6, &(0x7f0000000f40)={&(0x7f0000000800), 0xc, &(0x7f0000000c40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="b8000000", @ANYBLOB], 0x2}, 0x1, 0x0, 0x0, 0x14010}, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0)

08:13:27 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  119.791654] BUG: unable to handle kernel NULL pointer dereference at           (null)
[  119.794093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  119.799941] IP:           (null)
[  119.799948] PGD a9600067 P4D a9600067 PUD 86ee3067 PMD 0 
[  119.817563] Oops: 0010 [#1] PREEMPT SMP KASAN
[  119.822178] Modules linked in:
[  119.826040] CPU: 0 PID: 7222 Comm: syz-executor.3 Not tainted 4.14.151 #0
[  119.831621] audit: type=1400 audit(1572941607.116:40): avc:  denied  { map } for  pid=7217 comm="syz-executor.0" path=2F6D656D66643AB3202864656C6574656429 dev="tmpfs" ino=26924 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
[  119.833148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  119.833155] task: ffff888062088540 task.stack: ffff888062090000
[  119.833161] RIP: 0010:          (null)
[  119.833168] RSP: 0018:ffff888062097d48 EFLAGS: 00010246
[  119.884908] RAX: dffffc0000000000 RBX: ffffffff88151060 RCX: ffffc9000904e000
[  119.892180] RDX: 1ffffffff102a223 RSI: 0000000000000000 RDI: ffff88809cb56000
[  119.899741] RBP: ffff888062097d68 R08: 0000000000000001 R09: ffff888062088de0
[  119.907161] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88809cb56000
[  119.914425] R13: ffff88809cb5600e R14: 000000000000001c R15: 0000000000000002
[  119.921780] FS:  00007f5906435700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000
[  119.930012] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  119.935889] CR2: 0000000000000000 CR3: 0000000084a88000 CR4: 00000000001406f0
[  119.943151] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  119.950409] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  119.957666] Call Trace:
[  119.960248]  inet_autobind+0xae/0x180
[  119.964039]  inet_dgram_connect+0x136/0x1e0
[  119.968349]  SYSC_connect+0x1f6/0x2d0
[  119.972138]  ? SYSC_bind+0x220/0x220
[  119.975843]  ? nsecs_to_jiffies+0x30/0x30
[  119.979981]  ? SyS_clock_gettime+0xf8/0x180
[  119.984468]  SyS_connect+0x24/0x30
[  119.987997]  ? SyS_accept+0x30/0x30
[  119.991622]  do_syscall_64+0x1e8/0x640
[  119.995683]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  120.000657]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  120.005990] RIP: 0033:0x45a219
[  120.009168] RSP: 002b:00007f5906434c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  120.017211] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a219
[  120.024603] RDX: 000000000000001c RSI: 00000000208c0000 RDI: 0000000000000004
[  120.031904] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
08:13:27 executing program 4:
socket$inet_udp(0x2, 0x2, 0x0)
mlockall(0x3)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='ev?kvV\x00', 0x28800, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000040)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x68, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x401, 0x1)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000000c0)={0x0, 0x10, 0xffffffffffff619c, 0x1000, 0x9, 0x1})

08:13:27 executing program 2:
r0 = socket$inet(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="24000000180007841dfffd946f61050002008100fd038b0502000800080005000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0)

[  120.039166] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f59064356d4
[  120.046425] R13: 00000000004c09aa R14: 00000000004d3358 R15: 00000000ffffffff
[  120.053693] Code:  Bad RIP value.
[  120.057244] RIP:           (null) RSP: ffff888062097d48
[  120.062615] CR2: 0000000000000000
[  120.070663] ---[ end trace 8a28fa95ef7a5814 ]---
[  120.072606] kobject: 'loop2' (ffff8880a4986e60): kobject_uevent_env
[  120.078846] Kernel panic - not syncing: Fatal exception
[  120.086844] kobject: '��' (ffff8880622e5570): kobject_add_internal: parent: 'net', set: 'devices'
[  120.089299] Kernel Offset: disabled
[  120.102050] Rebooting in 86400 seconds..