[ 56.874610] audit: type=1800 audit(1539173135.911:27): pid=5997 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[ 58.331023] random: sshd: uninitialized urandom read (32 bytes read) [?25l[?1c7[ ok 8[?25h[?0c. [ 59.694653] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 60.155048] random: sshd: uninitialized urandom read (32 bytes read) [ 62.590792] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. [ 68.348376] random: sshd: uninitialized urandom read (32 bytes read) 2018/10/10 12:05:49 fuzzer started [ 72.962082] random: cc1: uninitialized urandom read (8 bytes read) 2018/10/10 12:05:54 dialing manager at 10.128.0.26:45337 2018/10/10 12:05:54 syscalls: 1 2018/10/10 12:05:54 code coverage: enabled 2018/10/10 12:05:54 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/10/10 12:05:54 setuid sandbox: enabled 2018/10/10 12:05:54 namespace sandbox: enabled 2018/10/10 12:05:54 Android sandbox: /sys/fs/selinux/policy does not exist 2018/10/10 12:05:54 fault injection: enabled 2018/10/10 12:05:54 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/10/10 12:05:54 net packed injection: /dev/net/tun can't be opened (open /dev/net/tun: cannot allocate memory) 2018/10/10 12:05:54 net device setup: enabled [ 77.616840] random: crng init done 12:07:52 executing program 0: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000f2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 193.917272] IPVS: ftp: loaded support on port[0] = 21 [ 195.003912] ip (6174) used greatest stack depth: 53056 bytes left [ 195.447097] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.453715] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.462553] device bridge_slave_0 entered promiscuous mode [ 195.609909] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.616774] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.625464] device bridge_slave_1 entered promiscuous mode [ 195.769655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 195.912747] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 196.359617] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 196.506324] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 196.787959] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 196.795207] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready 12:07:56 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000f2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(&(0x7f0000000180)={0x400001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) [ 197.238552] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 197.246886] team0: Port device team_slave_0 added [ 197.496058] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 197.504437] team0: Port device team_slave_1 added [ 197.778680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.903205] IPVS: ftp: loaded support on port[0] = 21 [ 198.043833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 198.051028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 198.060275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 198.303716] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 198.311398] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.320729] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.527443] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 198.535176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.544418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.131293] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.137884] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.146555] device bridge_slave_0 entered promiscuous mode [ 200.308558] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.315253] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.323940] device bridge_slave_1 entered promiscuous mode [ 200.515573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 200.668502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 201.106791] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.113384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.120343] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.126948] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.135938] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 201.268043] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 201.504153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 201.806164] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 201.817295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.912340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.019905] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 202.027219] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.855975] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.864318] team0: Port device team_slave_0 added 12:08:02 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000f2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(&(0x7f0000000180)={0x400001, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) [ 203.263255] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 203.271530] team0: Port device team_slave_1 added [ 203.626458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 203.633761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 203.642949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.967254] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 203.974680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 203.983619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.044547] IPVS: ftp: loaded support on port[0] = 21 [ 204.286661] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 204.294546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.303904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.665469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 204.673420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.682874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 206.638751] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.645329] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.654005] device bridge_slave_0 entered promiscuous mode [ 206.954226] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.960727] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.969565] device bridge_slave_1 entered promiscuous mode [ 207.267326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 207.504556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 208.034004] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.040499] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.047637] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.054215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.063422] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 208.322510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 208.465630] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.768878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.916444] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 208.923834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 209.265550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 209.272834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 210.090951] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 210.099442] team0: Port device team_slave_0 added [ 210.416097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 210.424511] team0: Port device team_slave_1 added [ 210.759712] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 210.766994] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 210.776205] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.085676] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 211.092911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.102076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 12:08:10 executing program 3: sched_setaffinity(0x0, 0x328, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 211.346382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 211.354176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.363225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.753206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 211.760970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.770417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.896249] IPVS: ftp: loaded support on port[0] = 21 [ 213.299164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.708733] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.860721] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.867309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.874419] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.880897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.889994] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 215.984440] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.990865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.999308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.236798] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.243477] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.252087] device bridge_slave_0 entered promiscuous mode [ 216.524333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.654380] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.660861] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.669598] device bridge_slave_1 entered promiscuous mode [ 217.044650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 217.345447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 217.463330] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.331032] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.681736] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.971908] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 218.979015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.349435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 219.356684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.480465] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 220.488733] team0: Port device team_slave_0 added [ 220.864854] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 220.873154] team0: Port device team_slave_1 added [ 221.218448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 221.226575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.235614] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.609344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 221.616586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 221.626181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 12:08:20 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) fadvise64(r0, 0x0, 0x0, 0x0) [ 222.020755] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 222.028605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 222.037866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 222.503699] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 222.511360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 222.520807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 222.649516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.680348] IPVS: ftp: loaded support on port[0] = 21 [ 224.280737] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 225.909800] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 225.916525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 225.924681] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:08:26 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 227.473249] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 227.609275] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.626986] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.633531] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.640599] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.647366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.656554] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 227.866305] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.873425] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.882141] device bridge_slave_0 entered promiscuous mode [ 228.265857] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.272582] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.281077] device bridge_slave_1 entered promiscuous mode 12:08:27 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 228.661878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 228.812115] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 229.208958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 12:08:29 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 230.376281] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 230.826952] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 231.267854] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 231.275168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 12:08:30 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 231.705592] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 231.712801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 232.235541] ip (6934) used greatest stack depth: 53040 bytes left [ 232.839527] 8021q: adding VLAN 0 to HW filter on device bond0 12:08:31 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 233.150672] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 233.159031] team0: Port device team_slave_0 added [ 233.678551] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 233.686919] team0: Port device team_slave_1 added [ 234.136488] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 234.143800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 234.152962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 12:08:33 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) sendfile(r4, r5, &(0x7f0000d83ff8), 0x8000fffffffe) [ 234.476359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 234.483967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 234.492869] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 234.560834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:08:33 executing program 5: ustat(0x100, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x4, 0x80800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x0, 0x231c, 0xc327}) fgetxattr(r0, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000140)=""/151, 0x97) statfs(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=""/9) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x9, 0x100000001, 0x0, 0x4, 0x3, {0x0, @in6={{0xa, 0x4e22, 0x8000, @empty, 0x1}}, 0x0, 0x7, 0x1, 0x2, 0x3}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r1, 0x9, 0x5, 0x3, 0x5, 0x5}, &(0x7f00000003c0)=0x14) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000400)={0x8, 0x9, 0x20, 0x10001}) lseek(r0, 0x0, 0x1) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000440)=0x0) r3 = dup2(r0, r0) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x1f) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x18, r4, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000005c0)={0x5, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}}}, 0x88) sendmsg$xdp(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)="a6c33f0c463194db17e080bc41149de3ede988f64c3cc40ed620a887009b1a6b99e88be9ae66a69cc921c666485aa4c97540f8f63b26c8d17c26b2a705aa670e6ad9", 0x42}, {&(0x7f0000000700)="d47492472b6e1c2185d9861aa9776a516e9e04d64238362b2bc50493e6ad578b069baee588050350eb248199a9451721841d02ffc8622faeaab438211279323423e9acd163a06912d59494cdfec637f9789dca3808a245ea2d41cf48de7eecf0b636f69b46538bf4c60d694ba3cd79f75f684f819f59bb62e92a2cbb62a967b6d8d4fb94465b3ccf21", 0x89}], 0x2, 0x0, 0x0, 0x800}, 0x90) write$P9_RREAD(r0, &(0x7f0000000840)={0xc1, 0x75, 0x2, {0xb6, "b8f366c70df027649eab2974a69ee345f5300779841aa7e8b6230f4aca139077b153e5972f2270ac954aa5e52dac751a557e81a8a2edf273bbf3afe2b04b0ca70275c3bf79583a1c55326e5aa71cef8ac37c89c97c025cdf17db894270451b457544bb2723ee39e32009fed117573ef10702b2ab807c3c874f78c07b9042a3b598d5f15f89b8d0905a8566823b3eb940af360b823f9279682b29b4e02c0197d9dd05761f73b3cfa76f725f806a2f4afb3f54190d463f"}}, 0xc1) getsockopt$inet_mreqsrc(r3, 0x0, 0x0, &(0x7f0000000940)={@remote, @rand_addr, @rand_addr}, &(0x7f0000000980)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000009c0)={@loopback}, &(0x7f0000000a00)=0x14) write$P9_RREADLINK(r3, &(0x7f0000000a40)={0x10, 0x17, 0x2, {0x7, './file1'}}, 0x10) recvmsg(r0, &(0x7f0000000e80)={&(0x7f0000000a80)=@generic, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/38, 0x26}, {&(0x7f0000000b40)=""/87, 0x57}, {&(0x7f0000000bc0)=""/25, 0x19}, {&(0x7f0000000c00)=""/153, 0x99}, {&(0x7f0000000cc0)=""/159, 0x9f}], 0x5, &(0x7f0000000e00)=""/128, 0x80, 0x100000000}, 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000f00)={{0x7, 0x7, 0x1, 0x2, 'syz0\x00', 0x20}, 0x2, 0x103, 0x3, r2, 0x6, 0x80000000, 'syz0\x00', &(0x7f0000000ec0)=['/dev/audio#\x00', '\x00', '][selfuser\x00', '/\x00', 'procuser.\x00', 'em0)\x00'], 0x29, [], [0x6, 0x0, 0xfffffffffffffff8, 0x9]}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001080)={&(0x7f0000001040)='em0)\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001280)={r3, &(0x7f00000010c0)="74f304bf8d8680882a67c5f2bbf50bd3eae393b48b06375df2a65025815a7a49850eab2e36c22ac1161cab9eb781b1dbe97597c591b5171f82f135a80b86a21ee99ccb8f84e70e29523527aebaa2e31eeb2a919669d1facae43f93db4f48d9fbb43a303c99b9a1b41273e95735d55d3524844ee2eec73baadf4b4cce240118de15aaee68895b910341742c9ae769ca2d9541f9bd2b202203e12f7855a93b612b9e3910f4b0ef8d58b69d3dfc2d88fb5c4a55547043a00483c82bac3c7a527430020780143838c33ab40f57ccbecaadf9ea5378de514ec786205a354ccd1a201194", &(0x7f00000011c0)="dc872e6ef221a7a91d6a4e150e5a7468db6743d4d3456703f9bbe3d9f2f2ac9da466814f17005c7e3fb4ab6338b3e40cc14031000466ef156b7b719b158e982c897c66c115c336aaabe8ddb5883e4f5b65414469538f85d7c86b61dddc804e74cb08d48bd25198a51a6a060c4e34970ae49df554696c6a020f1622754300b0c18b"}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001340)={r3, 0x50, &(0x7f00000012c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001380)=r6, 0x4) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f00000013c0)=0x6c7b, 0x4) write$FUSE_BMAP(r5, &(0x7f0000001400)={0x18, 0x0, 0x7, {0x5}}, 0x18) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000001440)=""/105, &(0x7f00000014c0)=0x69) [ 234.977456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 234.985789] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.994840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.463682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 235.471336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.480509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 12:08:34 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) [ 236.158478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 236.165090] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 236.173122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 236.691514] IPVS: ftp: loaded support on port[0] = 21 [ 237.609825] 8021q: adding VLAN 0 to HW filter on device team0 12:08:37 executing program 1: perf_event_open(&(0x7f0000940000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000f2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(&(0x7f0000000180)={0x400001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000002000)}) [ 239.649814] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.656414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.663494] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.669966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.678663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 240.067562] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.074246] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.082909] device bridge_slave_0 entered promiscuous mode [ 240.263277] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.375002] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.381491] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.390197] device bridge_slave_1 entered promiscuous mode [ 240.665002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.879361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 241.704298] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 242.076079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 242.434278] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 242.441376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 242.705188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 242.712486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 243.045342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.581632] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 243.589857] team0: Port device team_slave_0 added [ 243.842122] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 243.850375] team0: Port device team_slave_1 added [ 244.178166] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 244.185562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 244.194736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 244.288956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 244.469930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 244.477353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.486264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.796807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 244.804732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.813775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready 12:08:43 executing program 2: sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)) creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x100000f2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(&(0x7f0000000180)={0x400001, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f0000002000)}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)) [ 245.126538] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 245.134300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.143905] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 245.436047] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 245.442559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 245.450391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.229231] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.967652] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.974284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.981274] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.987900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.996730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 248.003576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 250.476318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.372164] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 252.241358] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 252.247820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.255970] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:08:51 executing program 3: sched_setaffinity(0x0, 0x328, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) [ 253.140681] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.299758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.861448] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:08:56 executing program 4: 12:08:56 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) 12:08:56 executing program 1: socket$inet(0x2, 0x3, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0xd3, &(0x7f0000000000), 0x3c) 12:08:56 executing program 2: 12:08:56 executing program 3: [ 257.375957] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 257.382575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 257.390910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:08:56 executing program 3: 12:08:56 executing program 2: [ 258.326642] 8021q: adding VLAN 0 to HW filter on device team0 12:08:59 executing program 4: fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000680)) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1, 0x1) write$cgroup_pid(r0, &(0x7f00000003c0), 0x12) shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) geteuid() 12:08:59 executing program 1: 12:08:59 executing program 5: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(&(0x7f0000000180)=ANY=[], &(0x7f00000001c0)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x20000c, &(0x7f0000000240)) symlink(&(0x7f00000000c0)='.\x00', &(0x7f0000000140)='./file0/file0\x00') umount2(&(0x7f0000000000)='./file0/file0/file0\x00', 0x0) 12:08:59 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) 12:08:59 executing program 2: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85b, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x4000000) 12:08:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 12:08:59 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = dup2(r0, r0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002c00)={&(0x7f0000000040), 0xc, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x14}, 0x14}}, 0x0) 12:08:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 12:08:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c) 12:08:59 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000004c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 12:08:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r0, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800000000004, 0x20011, r1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x11, &(0x7f0000000340)={0x0, @in={{0x2, 0x0, @rand_addr}}}, &(0x7f0000000000)=0x2c2) 12:09:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x4000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/90) 12:09:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 12:09:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c) 12:09:00 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000440)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @remote}, 0xab852ebbe6fbd72e, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='~e\x00'}) [ 261.351683] hrtimer: interrupt took 230709 ns 12:09:00 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 12:09:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 12:09:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c) 12:09:01 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr}, 0x10) r1 = dup2(r0, r0) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000002c00)={&(0x7f0000000040), 0xc, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x14}, 0x14}}, 0x0) 12:09:01 executing program 5: write$cgroup_type(0xffffffffffffffff, &(0x7f0000001340)='threaded\x00', 0xfffffd63) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000140)={'nat\x00', 0x0, 0x4, 0x36, [], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=""/54}, &(0x7f00000001c0)=0x78) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x400000000000071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) 12:09:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000000)="0a5c2d023c126285718070") sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) poll(&(0x7f0000000080)=[{r0}], 0x1, 0x8) 12:09:01 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) r4 = dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) 12:09:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) 12:09:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c) 12:09:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) socket$inet6(0xa, 0x803, 0x3) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, "73797a310000000000004b1a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000800"}) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 12:09:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) [ 262.739712] input: syz1 as /devices/virtual/input/input5 12:09:01 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) dup(r2) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000100)) 12:09:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:02 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="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") fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="a319db023c06fdf84f6850548e44deb04002bda3644a71eda6cffcdd0b9f91ce7ec2b306368c95c71909c8870128a945c0e8d63e39f75e54ce31b1c4b40880e55045a4c03bee313e74b7dab3429beb2d0eb1a99cd76878c8d661038e", 0x5c, 0x0) 12:09:02 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$vsock_dgram(0x28, 0x2, 0x0) shutdown(r1, 0x2) poll(&(0x7f0000000040)=[{r1}], 0x20000000000000e6, 0x0) 12:09:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:02 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:02 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) dup(r1) 12:09:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:03 executing program 5: r0 = socket(0x10, 0x3, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x7, 0x0, r0, &(0x7f0000000280)="e0e63f3605eb", 0x6}]) 12:09:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f00000002c0), 0x4cc, 0x0) 12:09:03 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000002c0)="2f65786500e1ffffff0409004bddd9de91be10eebf000ee9a90f798058439eff54fa07424adee901d2da75af1f02acc7edbcd7a071fbbc7864c3cf7318e89c6e97ca49e2523f8d54c646dd47000000000000000000000082c8ed780fc8de13aac81a5393802cac9b30bd34f4b1aa91950e3321095ed1dc0609cf05b8b29c0700000000000000686d0e4d0e354ffbecf9b6cb56df37daad793393cdf96d60c334d7dee99d58bb98ec8fbae88509abe32fd44239abb4ccf659f55c76c288ae1d12b8aef689f19c39d9cdd8a249969185b3f229a48ef301365dc6762a1967eb3241f49796f3f6ceb28fd1833071221f0d81aee58fc8a61050486d5641c3dfc84c25baa2b3712cb8251267e70159894f6dd8f293e8cd44ea35ca1c52f1c165b6391d779405fabfaf835c2928c61282a10cfee523c694139d9b158c8ac9c2068deae9563a8661cef5dfb8714969cc727f52139996dd2f575b0af9cc013f275d36510000000000000000000000") fsetxattr(r0, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="a319db023c06fdf84f6850548e44deb04002bda3644a71eda6cffcdd0b9f91ce7ec2b306368c95c71909c8870128a945c0e8d63e39f75e54ce31b1c4b40880e55045a4c03bee313e74b7dab3429beb2d0eb1a99cd76878c8d661038e", 0x5c, 0x0) 12:09:03 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:03 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) seccomp(0x1, 0x1, &(0x7f0000000380)={0x2, &(0x7f0000000140)=[{0x3, 0xe286, 0x7, 0x9}, {0x8, 0x8, 0x3, 0x4}]}) 12:09:04 executing program 2: writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:04 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:04 executing program 1: sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x2, 0x0, 0x84, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sched_setaffinity(0x0, 0xffffffffffffff11, &(0x7f0000000240)=0x100000000e5) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f00000003c0)) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f00000004c0)='@vboxnet1\x00', 0xffffffffffffffff) 12:09:04 executing program 5: socket(0x10, 0x3, 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) io_submit(r0, 0x1, &(0x7f00000003c0)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000280)}]) 12:09:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmsg$nl_xfrm(r0, &(0x7f000014f000)={&(0x7f00003c7ff4), 0xc, &(0x7f00000bfff0)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000800002200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000008a9a035998ab6803a9c3fe105e60d915e904cb0d041a5b8bc9fd05969a0fe167ffe5b67588249ba24424cbea293779bc07c82e0a71e6b77b4f43a6b66dd329f962dc5c5aabb379556b17ee44447e61ce91cd7f99f37148a394578cc5dda5c24b43408fc968c5187057"], 0x1}}, 0x0) 12:09:04 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) 12:09:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfd01, 0x0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) 12:09:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x3}, {0x6}]}, 0x10) 12:09:05 executing program 5: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x12, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000ff8)={0xfffffffffffffdb0}, 0x8, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) read(r2, &(0x7f0000000140)=""/128, 0x80) 12:09:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:05 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) creat(&(0x7f00000001c0)='./bus\x00', 0x0) 12:09:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:06 executing program 1: sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0) prctl$seccomp(0x16, 0x1, &(0x7f0000000440)={0x2, &(0x7f0000000380)=[{}, {}]}) 12:09:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:06 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000300)={{0xa, 0x4e21, 0x101, @local, 0x33d7015b}, {0xa, 0x4e23, 0x0, @remote, 0x9}, 0x5, [0x0, 0x7f, 0x9, 0x3, 0x3, 0x561a, 0x3]}, 0x5c) 12:09:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:06 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x2, 0x0, 0x84, 0x0, 0x2, 0x0, 0x70bd2a}, 0x10}}, 0x4000000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)) close(0xffffffffffffffff) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000240)='threaded\x00', 0xf96d) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x400000000000071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@rand_addr, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000006c0)={{0xa, 0x4e20, 0x0, @mcast1, 0xbed5}, {}, 0x0, [0x4, 0x176b685b, 0x0, 0x0, 0x1f, 0x0, 0x10001]}, 0x5c) ftruncate(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000380)={0x7}, 0x7) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x3) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f00000004c0)='@vboxnet1\x00', 0xffffffffffffffff) [ 267.191147] kauditd_printk_skb: 3 callbacks suppressed [ 267.191180] audit: type=1326 audit(1539173346.231:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7872 comm="syz-executor1" exe="/root/syz-executor1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 12:09:06 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x800000000002) ioctl(r2, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") sendmmsg$alg(r1, &(0x7f0000006780)=[{0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000012c0)}], 0x500, 0x0) 12:09:06 executing program 2: socket$netlink(0x10, 0x3, 0x8000000004) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824ca945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00ff050000000010000100090a0000000000000000", 0x58}], 0x1) 12:09:06 executing program 5: prctl$seccomp(0x16, 0x1, &(0x7f0000000440)={0x0, &(0x7f0000000380)}) 12:09:06 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) socket$inet6(0xa, 0x400000000001, 0x0) 12:09:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) [ 267.717495] audit: type=1326 audit(1539173346.761:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7894 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 12:09:07 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) 12:09:07 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000140)={0x84, @loopback, 0x0, 0x0, 'mh\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '}, 0x2c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x840, 0x4) 12:09:07 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) 12:09:07 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) [ 268.489237] audit: type=1326 audit(1539173347.531:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7894 comm="syz-executor5" exe="/root/syz-executor5" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45a3da code=0x0 12:09:07 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 12:09:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x1ba, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f00000026c0), 0x0, &(0x7f0000002700)}}], 0x75a, 0x0) 12:09:08 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xfffffffffffffea3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, r1, r2}, 0xc) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000180)) read(r4, &(0x7f0000009f9c)=""/100, 0x64) io_setup(0xffffffff, &(0x7f0000000000)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x36, r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x10, 0x1, 0x6, 0x2, 0x8, r5, 0x401}, 0x2c) ioctl$LOOP_SET_DIRECT_IO(r3, 0x1277, 0x930000) 12:09:08 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:08 executing program 1: fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)) close(0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x400000000000071, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@rand_addr, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0xe8) ftruncate(0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) sync_file_range(0xffffffffffffffff, 0x0, 0x80000000, 0x3) request_key(&(0x7f0000000140)='user\x00', &(0x7f0000000200)={'syz'}, &(0x7f00000004c0)='@vboxnet1\x00', 0xffffffffffffffff) 12:09:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040), 0x0) 12:09:08 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 12:09:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1) 12:09:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x29, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:08 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) 12:09:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000080)={&(0x7f0000000040), 0xc, &(0x7f00008b7ff0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000000101010000000000ffffffff020001000500020000000000"], 0x1c}}, 0x0) 12:09:08 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:09 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) socket$inet6(0xa, 0x80000, 0x7ffffffa) 12:09:09 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0x0) recvfrom(r1, &(0x7f0000000300)=""/68, 0x44, 0x0, &(0x7f0000000140)=@hci, 0x7070a0) 12:09:09 executing program 5: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xfffffffffffffea3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, r1, r2}, 0xc) r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000004c0)=0x2, 0x4) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x72}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x0, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000915ffc), &(0x7f0000000180)) read(r4, &(0x7f0000009f9c)=""/100, 0x64) io_setup(0xffffffff, &(0x7f0000000000)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x100, 0x0) io_cancel(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x36, r3, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x10, 0x1, 0x6, 0x2, 0x8, r5, 0x401}, 0x2c) ioctl$LOOP_SET_DIRECT_IO(r3, 0x1277, 0x930000) 12:09:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1) 12:09:09 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x410100, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:09:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:09 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) [ 270.620032] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 12:09:09 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="145f420000000000000007ff000000000300140006000000000000000000000000000000000008000500ac14141a080003000100000f010008"], 0x1}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x410100, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x375, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x1, r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x26a, 0x0, &(0x7f0000000100), 0xffffffffffffe82) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[{0x0, 0xc91}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12:09:10 executing program 0: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000180), 0xc, &(0x7f0000000880)={&(0x7f0000000800)=@ipv6_getroute={0x24, 0x1a, 0x21, 0x0, 0x0, {}, [@RTA_IIF={0x8}]}, 0x24}}, 0x0) [ 270.955190] ================================================================== [ 270.962764] BUG: KMSAN: uninit-value in vmx_set_constant_host_state+0x1778/0x1830 [ 270.970415] CPU: 1 PID: 8003 Comm: syz-executor1 Not tainted 4.19.0-rc4+ #66 [ 270.977621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.986990] Call Trace: [ 270.989608] dump_stack+0x306/0x460 [ 270.993274] ? vmx_set_constant_host_state+0x1778/0x1830 [ 270.998784] kmsan_report+0x1a2/0x2e0 [ 271.002629] __msan_warning+0x7c/0xe0 [ 271.006482] vmx_set_constant_host_state+0x1778/0x1830 [ 271.011805] vmx_create_vcpu+0x3e6f/0x7870 [ 271.016067] ? kmsan_set_origin_inline+0x6b/0x120 [ 271.020939] ? __msan_poison_alloca+0x17a/0x210 [ 271.025657] ? vmx_vm_init+0x340/0x340 [ 271.029585] kvm_arch_vcpu_create+0x25d/0x2f0 [ 271.034123] kvm_vm_ioctl+0x13fd/0x33d0 [ 271.038135] ? __msan_poison_alloca+0x17a/0x210 [ 271.042839] ? do_vfs_ioctl+0x18a/0x2810 [ 271.046933] ? __se_sys_ioctl+0x1da/0x270 [ 271.051128] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.056005] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.060879] do_vfs_ioctl+0xcf3/0x2810 [ 271.064811] ? security_file_ioctl+0x92/0x200 [ 271.069355] __se_sys_ioctl+0x1da/0x270 [ 271.073370] __x64_sys_ioctl+0x4a/0x70 [ 271.077298] do_syscall_64+0xbe/0x100 [ 271.081136] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 271.086356] RIP: 0033:0x457579 [ 271.089578] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.108501] RSP: 002b:00007fcda704fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.116257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 271.123553] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 271.130851] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 271.138141] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcda70506d4 [ 271.145437] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 271.152755] 12:09:10 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000200), 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, ':pq0\x00'}]}, 0x34}}, 0x0) 12:09:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)}], 0x1) [ 271.154404] Local variable description: ----dt@vmx_set_constant_host_state [ 271.161424] Variable was created at: [ 271.165167] vmx_set_constant_host_state+0x2b0/0x1830 [ 271.170376] vmx_create_vcpu+0x3e6f/0x7870 [ 271.174618] ================================================================== [ 271.181990] Disabling lock debugging due to kernel taint [ 271.187468] Kernel panic - not syncing: panic_on_warn set ... [ 271.187468] [ 271.194873] CPU: 1 PID: 8003 Comm: syz-executor1 Tainted: G B 4.19.0-rc4+ #66 [ 271.203468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 271.212839] Call Trace: [ 271.215476] dump_stack+0x306/0x460 [ 271.219162] panic+0x54c/0xafa [ 271.222430] ? __msan_metadata_ptr_for_store_1+0x13/0x20 [ 271.227917] kmsan_report+0x2d3/0x2e0 [ 271.231769] __msan_warning+0x7c/0xe0 [ 271.235616] vmx_set_constant_host_state+0x1778/0x1830 [ 271.240940] vmx_create_vcpu+0x3e6f/0x7870 [ 271.245205] ? kmsan_set_origin_inline+0x6b/0x120 [ 271.250102] ? __msan_poison_alloca+0x17a/0x210 [ 271.254817] ? vmx_vm_init+0x340/0x340 [ 271.258750] kvm_arch_vcpu_create+0x25d/0x2f0 [ 271.263295] kvm_vm_ioctl+0x13fd/0x33d0 [ 271.267317] ? __msan_poison_alloca+0x17a/0x210 [ 271.272025] ? do_vfs_ioctl+0x18a/0x2810 [ 271.276115] ? __se_sys_ioctl+0x1da/0x270 [ 271.280291] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.285166] ? vcpu_stat_clear_per_vm+0x420/0x420 [ 271.290045] do_vfs_ioctl+0xcf3/0x2810 [ 271.293986] ? security_file_ioctl+0x92/0x200 [ 271.298526] __se_sys_ioctl+0x1da/0x270 [ 271.302552] __x64_sys_ioctl+0x4a/0x70 [ 271.306470] do_syscall_64+0xbe/0x100 [ 271.310310] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 271.315516] RIP: 0033:0x457579 [ 271.318732] Code: 1d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 271.337651] RSP: 002b:00007fcda704fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.345386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457579 [ 271.352676] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005 [ 271.359987] RBP: 000000000072c040 R08: 0000000000000000 R09: 0000000000000000 [ 271.367283] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcda70506d4 [ 271.374569] R13: 00000000004bfc18 R14: 00000000004cfca0 R15: 00000000ffffffff [ 271.383015] Kernel Offset: disabled [ 271.386657] Rebooting in 86400 seconds..