[ 52.599278] audit: type=1800 audit(1544841560.654:25): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 54.303007] kauditd_printk_skb: 3 callbacks suppressed [ 54.303037] audit: type=1800 audit(1544841562.364:29): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 54.327910] audit: type=1800 audit(1544841562.364:30): pid=6369 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.1' (ECDSA) to the list of known hosts. 2018/12/15 02:39:35 fuzzer started syzkaller login: [ 69.929477] cc1 (6525) used greatest stack depth: 53688 bytes left 2018/12/15 02:39:39 dialing manager at 10.128.0.26:40477 2018/12/15 02:39:40 syscalls: 1 2018/12/15 02:39:40 code coverage: enabled 2018/12/15 02:39:40 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2018/12/15 02:39:40 setuid sandbox: enabled 2018/12/15 02:39:40 namespace sandbox: enabled 2018/12/15 02:39:40 Android sandbox: /sys/fs/selinux/policy does not exist 2018/12/15 02:39:40 fault injection: enabled 2018/12/15 02:39:40 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/12/15 02:39:40 net packet injection: enabled 2018/12/15 02:39:40 net device setup: enabled 02:42:52 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) [ 264.999881] IPVS: ftp: loaded support on port[0] = 21 [ 266.432909] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.439463] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.447946] device bridge_slave_0 entered promiscuous mode [ 266.534224] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.540752] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.549212] device bridge_slave_1 entered promiscuous mode [ 266.633531] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 266.717465] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 266.977268] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 267.068510] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 267.154119] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 267.161131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 267.248273] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 267.255316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 267.518902] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 267.527680] team0: Port device team_slave_0 added [ 267.611770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 267.620399] team0: Port device team_slave_1 added [ 267.706877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 267.799783] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 267.889412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 267.897139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 267.906495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 267.995155] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 268.003021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 268.012394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:42:56 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000140)) [ 268.988340] IPVS: ftp: loaded support on port[0] = 21 [ 269.070574] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.077190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.084424] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.090975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.100424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 269.107050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 271.111778] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.118337] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.126774] device bridge_slave_0 entered promiscuous mode [ 271.244490] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.251040] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.259584] device bridge_slave_1 entered promiscuous mode [ 271.352973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 271.527781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 272.023546] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 272.175258] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 272.885962] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 272.894756] team0: Port device team_slave_0 added [ 272.980974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 272.989736] team0: Port device team_slave_1 added [ 273.175622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 273.183535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 273.192567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 273.388588] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 273.540469] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 273.548232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 273.557633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.723929] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 273.731706] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 273.740786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:43:02 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x10, 0x100000000003, 0xc) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000180)="24000000070607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) [ 274.582369] IPVS: ftp: loaded support on port[0] = 21 [ 275.275000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.761448] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.768086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.775308] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.781926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.791195] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 275.798314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 275.867898] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 276.557344] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 276.564246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.572384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.269735] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.360673] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.367318] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.375566] device bridge_slave_0 entered promiscuous mode [ 277.565729] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.572396] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.580679] device bridge_slave_1 entered promiscuous mode [ 277.822876] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 277.920136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 278.414257] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 278.614420] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 278.995602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 279.002782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.563646] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 279.572403] team0: Port device team_slave_0 added [ 279.743747] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 279.752506] team0: Port device team_slave_1 added [ 279.900801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.021894] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 280.029101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.038373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.196627] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 280.204392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.213588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 280.408416] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 280.416777] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.426017] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:43:09 executing program 0: r0 = socket$inet6(0xa, 0x2000000803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = syz_open_dev$dri(&(0x7f00000003c0)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, 0x0) 02:43:10 executing program 0: 02:43:10 executing program 0: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) 02:43:10 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x91) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000040)={0x3f, 0x0, 0x6f87, 0x0, 0x0, [], [], [], 0x5, 0x7f}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = dup(r0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x3, 0x81}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x22000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xbc00000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4001) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000003c0), &(0x7f0000000400)=0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000440)='trusted.overlay.redirect\x00', &(0x7f0000000480)='./file0\x00', 0x8, 0x0) getpeername$packet(r0, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@local, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1b}}, @loopback, 0x9, 0x8, 0xf6b, 0x400, 0x7, 0x4, r3}) ioctl$FIBMAP(r1, 0x1, &(0x7f00000005c0)=0x400) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000600)={0x0, 0x1}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000680)={r4, @in={{0x2, 0x4e20, @rand_addr=0x4}}, 0x6, 0x7}, &(0x7f0000000740)=0x90) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000780), 0x4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000007c0)={0x0, @aes256, 0x1, "b347a4983071e8d9"}) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000800)=@assoc_value={r5, 0x400}, 0x8) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000840)) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000880)='/dev/sequencer2\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x8, 0x3}, &(0x7f0000000940), 0x1000) renameat(r1, &(0x7f0000000980)='./file0\x00', r0, &(0x7f00000009c0)='./file0\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@multicast1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000b00)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000b40)={{{@in=@rand_addr=0x5, @in=@loopback, 0x4e20, 0x0, 0x4e21, 0x8000, 0xa, 0x69bcaa709e31b59c, 0xa0, 0x7f, r3, r7}, {0xff, 0x8, 0x5, 0x9, 0x1ff, 0x9, 0xdd, 0x2}, {0x101, 0x5, 0x9dc1, 0x6}, 0x40, 0x6e6bbe, 0x3, 0x1, 0x2, 0x3}, {{@in6, 0x4d3, 0xff}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0xb}, 0x3502, 0x7, 0x1, 0x0, 0x8, 0x6, 0x1c4}}, 0xe8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000c40), &(0x7f0000000c80)=0x4) getsockname(r0, &(0x7f0000000cc0)=@hci, &(0x7f0000000d40)=0x80) ioctl$KDENABIO(r0, 0x4b36) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f00000011c0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001180)={&(0x7f0000000e00)={0x374, r8, 0xcf63aa122df32d60, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK={0x128, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2000000000000}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa511}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}, @TIPC_NLA_MEDIA={0x58, 0x5, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7c5482e2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4a0d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4519}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7031}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffff378a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x113c}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xdf}]}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd42}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x374}}, 0x40) r9 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, r9) [ 282.360562] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.367179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.374429] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.381081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.390725] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 282.397273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 282.876999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.977207] IPVS: ftp: loaded support on port[0] = 21 02:43:11 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3f, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000080)={0x0, 0x100000000, 0x8dc, [], &(0x7f0000000040)=0xc0d}) unshare(0x400) flock(r0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) 02:43:11 executing program 0: syslog(0x3, &(0x7f00000004c0)=""/128, 0x3644) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000200)=""/125) 02:43:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/103) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x3}, &(0x7f0000000200)=0x8) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[@ANYBLOB="03eadb2c920f91"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 283.652867] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 283.745010] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 02:43:11 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="fd"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) fcntl$F_SET_RW_HINT(r0, 0x40c, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f0000000040)=""/191, &(0x7f0000000100)=0xbf) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:43:12 executing program 0: syz_open_procfs(0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.prUcs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="c7da5f1a", 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') sendfile(r3, r4, 0x0, 0x10000000000443) read(r3, &(0x7f00000003c0)=""/72, 0x100000104) sendmsg$xdp(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000000), 0x26f) 02:43:12 executing program 0: creat(&(0x7f0000000480)='./file0\x00', 0x0) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="71173a000000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='xfs\x00', 0x8003, &(0x7f00000000c0)) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) [ 284.633473] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 284.639775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 284.647754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 285.322108] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.388513] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.395336] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.403745] device bridge_slave_0 entered promiscuous mode [ 286.527730] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.534339] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.542887] device bridge_slave_1 entered promiscuous mode [ 286.682694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 286.813389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 287.316154] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 287.523556] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 287.883165] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 287.890158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 288.351388] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 288.360081] team0: Port device team_slave_0 added [ 288.463717] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 288.472526] team0: Port device team_slave_1 added [ 288.620502] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 288.781651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 288.788724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 288.798338] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 289.001385] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 289.009254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 289.018371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 289.212921] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 289.220557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 289.229668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 289.544678] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 02:43:17 executing program 1: uselib(&(0x7f0000000000)='./file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x80}) [ 289.974949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.617340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 290.756940] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.763575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.770731] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.777376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.786384] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 290.792984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.198146] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 291.204626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.212619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.733612] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.232427] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 295.239922] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 295.268687] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 295.276246] netlink: 'syz-executor2': attribute type 1 has an invalid length. 02:43:23 executing program 0: r0 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x0, 0x2) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x110, r1, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c00}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x50, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000}, 0x4040885) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='./file0\x00', &(0x7f0000000240)="72616d6673009fcfdc460284e1c65bc7406c923e201a2151c2237823cb1f6e4b6fc6e65face0ca69e653d25b83aa8a7c7af0ccc1bda211718f43dece789643050900000000000000e62138d8bb74a0bf4c8e49c8cca5eaeb7f8ed737e2b7090d7ccc064770", 0x4, &(0x7f0000000340)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vhci\x00', 0x500200d00, 0x0) bind(r2, &(0x7f0000000140)=@ethernet={0x1, @random="762010501a2e"}, 0x80) mknod$loop(&(0x7f00000002c0)='./file0/file0\x00', 0x2012, 0xffffffffffffffff) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000080)={0x0, @speck128, 0x1, "b69b512b790082ba"}) open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 02:43:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge_slavev1\x00', r1}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x210800, 0x0) recvmsg(r3, &(0x7f0000000880)={&(0x7f0000000b40)=@sco, 0x80, &(0x7f0000000400)=[{&(0x7f0000000a80)=""/181, 0x1b3}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000400)}, {&(0x7f00000008c0)=""/205, 0x3cb}], 0x4, &(0x7f0000000800)=""/71, 0x47}, 0x1) accept$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2240bef79d22efaeec00000804010000794e28df0000", @ANYRES32=r2, @ANYBLOB="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"], 0x28}}, 0x0) ioctl(r3, 0x2ea, &(0x7f00000000c0)="693d5f0cc664b53548be3538c1666517e095ab17d6c1f7783f96aa5757ea12d3c296ecee089849d3ab82905b2b4b5a4584c966d1fa928276b81d4dfacbf5855c51978f68310553c27a3c272f1806aea5176af3704924bd57e338404928b599dce5c0ca79") socket$bt_hidp(0x1f, 0x3, 0x6) 02:43:23 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x2800) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TIOCEXCL(r2, 0x540c) write(r2, &(0x7f0000000000)="bf", 0x1) r3 = dup3(r2, r1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1\x00', 0x10) 02:43:23 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x608201) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x7, 0x0) fcntl$addseals(r0, 0x409, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x400080, 0x0) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhci\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r4, 0x6}, 0x8) rt_sigtimedwait(&(0x7f0000000240)={0x6}, &(0x7f0000000280), &(0x7f0000000300)={0x77359400}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000340)={r4, 0xfffffffffffffff7}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000003c0)={r5, 0x6, 0xffff, 0x8000}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400), 0x4) timerfd_settime(r0, 0x0, &(0x7f0000000440), &(0x7f0000000480)) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f00000004c0)) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000500)={0x0, @speck128}) r6 = msgget$private(0x0, 0x4) msgctl$MSG_INFO(r6, 0xc, &(0x7f0000000540)=""/116) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f00000005c0)={0x7, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000700)=0x5) prctl$PR_SET_FP_MODE(0x2d, 0x1) lsetxattr$security_smack_entry(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='security.SMACK64MMAP\x00', &(0x7f00000007c0)='ppp0usercpusetmime_type:\x00', 0x19, 0x3) r7 = creat(&(0x7f0000000800)='./file0\x00', 0x20) fcntl$dupfd(r0, 0x406, r3) ioctl$TCXONC(r7, 0x540a, 0x9) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000840)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000880)={r4, 0x1000, "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"}, &(0x7f00000018c0)=0x1008) lseek(r2, 0x0, 0x2) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000001900)='trusted.overlay.upper\x00', &(0x7f0000001940)={0x0, 0xfb, 0x3b, 0x7, 0x81, "f00942da18fd8f09dfb6465bd9f1e56c", "ed6013432b2a05451a0b66bdc46a0afa5a85be6d88a9f289e231ecf4af1d763d45fa89ee490f"}, 0x3b, 0x3) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, &(0x7f0000001980)={0x40000000000, 0x2, 0x5}) readv(r3, &(0x7f0000001a40)=[{&(0x7f00000019c0)=""/87, 0x57}], 0x1) [ 295.990731] IPVS: ftp: loaded support on port[0] = 21 [ 296.618991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.927542] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 297.237906] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 297.244260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 297.252222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.568156] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.616991] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.623607] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.631945] device bridge_slave_0 entered promiscuous mode [ 297.714520] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.721061] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.728985] device bridge_slave_1 entered promiscuous mode [ 297.812761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 297.894829] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 298.147967] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 298.234391] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 298.317041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 298.324377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 298.409344] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 298.416686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 298.673590] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 298.681670] team0: Port device team_slave_0 added [ 298.767658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 298.775538] team0: Port device team_slave_1 added [ 298.864034] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 298.952317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 299.042654] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 299.050319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 299.059682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 299.145877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 299.153572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 299.162844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 02:43:27 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKRESETZONE(r1, 0x401070ca, 0x0) 02:43:27 executing program 0: mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f0000ffc000/0x4000)=nil) 02:43:27 executing program 2: io_setup(0xb, &(0x7f0000000080)=0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) close(r1) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)) io_submit(r0, 0x1, &(0x7f0000000b00)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 02:43:27 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000080)="288922320bcca3", 0x0, 0x1000, &(0x7f0000001240)=""/4096}, 0x48) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x100) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000200)={'raw\x00'}, &(0x7f0000000280)=0x54) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x404) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000100)=0x4c0313ca, 0x4) ioctl$EVIOCGKEY(r1, 0xc0487c04, &(0x7f0000000000)=""/226) 02:43:27 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r1, 0x9, 0x18}, 0xc) r2 = getegid() setfsgid(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x12}, 0x2}}, [0x6, 0x5, 0x5, 0x5, 0x7edc, 0x9, 0x4000000000000000, 0x2, 0x7, 0xffff, 0x1, 0x4, 0x4, 0x20, 0x7cf72433]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000280)={r3, @in={{0x2, 0x4e23, @remote}}, 0xc6, 0x8, 0x400, 0x20, 0x4}, &(0x7f0000000340)=0x98) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000380)={'tunl0\x00', 0x1000}) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2490000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@ipv4_delroute={0xec, 0x19, 0x801, 0x70bd25, 0x25dfdbfc, {0x2, 0xb4, 0x0, 0x4, 0xff, 0x4, 0xc8, 0xb, 0x200}, [@RTA_SRC={0x8, 0x2, @broadcast}, @RTA_METRICS={0x9c, 0x8, "80f357326d44b04e5338d6a6b8041d1dbc8325deb43e1426f57007e9c498f525ce2b20e539560ec3bcdb25a228d785e148312d1dc11f505b27a0724ceebda60b166a26512ba1bfaa98b11b7b4369e06288ade0f1d62dcd2eccae57b1f332fff7216f0f4aa0290584d52d7c8dc9a1a4cb5cb8f03c793576ee5be952234c73acf334535218b5fae7fb4d57a7b268e01723304d138768"}, @RTA_DST={0x8, 0x1, @broadcast}, @RTA_DST={0x8, 0x1, @loopback}, @RTA_ENCAP={0x14, 0x16, @typed={0x10, 0x47, @str='/dev/vsock\x00'}}, @RTA_PRIORITY={0x8, 0x6, 0x1}]}, 0xec}}, 0x40) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000580)) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000005c0)={{0x2, 0x4e24, @multicast1}, {0x307, @local}, 0x52, {0x2, 0x4e22, @loopback}, 'gretap0\x00'}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000640)='syz1\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000700)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000800)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000840)={0x9, 0x100000001, r4, 0x0, r5, 0x0, 0x6, 0x401}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000880)=0x2, 0x4) r6 = add_key(&(0x7f0000000a40)='asymmetric\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0)="792750e2a0298f91e576f65bb0dbd0d20e3b4b7f57b2666e80ef0b953ac755424d1b47092677b55ca09bd61f6726b8810b222b11186100c4a67a74370e3729096342aeaf2f4a2fcbdb14df470007382c5ae42033168bb5cad0708c7f5e152a3e324d1e5b807c526c6a56c41736b21a6184cd9b371e75ca7c77bee5e3753c8e36c66976871f46450af7a0c052464afa9a3350a6a446d7", 0x96, 0xfffffffffffffff9) add_key(&(0x7f00000008c0)='rxrpc\x00', &(0x7f0000000900)={'syz', 0x2}, &(0x7f0000000940)="7019f07ba6e4858d709a0955bfc3f24f4752db390c0c74aaca2552cfdaa42d48b5f97cccf910158cff0a2454b1fa1d6706712a9caf3a33a1fa7774dc1861fb7a7b0312b4e155d59348baf17a97b345ad8d534e298a8be8b07c9fc202fc1615a8e4480652bede950b7e9b1ff5cc5977cd95a784b667dc6e368707887dadcc34b19165528187c2f6a494cc1e24871cde391e22b18c9b9a7f42a99b40adc97d8bebc76e19af5fa7b7a7f7ae68991dc272e5e09b1c121890ab70594f3e10adf92576132e", 0xc2, r6) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000bc0)={0x1, &(0x7f0000000b80)=[{}]}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000c00)={0x7, 0x6, 0x7, 0x7f, 0x10000}, 0x14) rt_sigqueueinfo(r4, 0x3e, &(0x7f0000000c40)={0x4, 0x2, 0x3}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r7 = semget$private(0x0, 0x1, 0x4e7) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000000cc0)=""/47) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000d00)={0x7ff, 0x1f}, 0x2) bind$vsock_stream(r0, &(0x7f0000000d40)={0x28, 0x0, 0xffffffff}, 0x10) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000d80)={0x3, 0x31, 0xd, 0x1c, 0xb, 0x0, 0x1, 0x4f, 0xffffffffffffffff}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000dc0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000001040)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x120}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x144, r8, 0x320, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x14, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x80, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0xc}, 0xda}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsf0\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x18, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x62c5}]}, @TIPC_NLA_NODE={0x10, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x800}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000000) 02:43:28 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000002c0), 0x4) 02:43:28 executing program 1: mkdir(&(0x7f00000009c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", 0x0) rename(&(0x7f00000001c0)="131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f00", &(0x7f0000000040)='./file0\x00') mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) 02:43:28 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x7) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="b93c564b636700000000b4ce360000a2", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000006dc0)=[{0x1000000f0ffffff, 0xffffff7f00000000, &(0x7f0000000080)=[{}], 0x1}], 0x259, 0x0) 02:43:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:28 executing program 0: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x9, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x0, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80007, 0x732) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socket$inet_smc(0x2b, 0x1, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0x94) getresuid(&(0x7f0000000440), &(0x7f0000000380), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x0, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x0, 0x0, 0x5, 0xf6b8}) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)) ioctl$TIOCSPGRP(r2, 0x5410, 0x0) 02:43:28 executing program 1: r0 = memfd_create(&(0x7f0000000100)="0b656d31c1f8a68d4ec0a35ce2cba2bae5f497ac232aff", 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000025000000000005d0"], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x125, &(0x7f0000000000)=[{0x0, 0x600000000000000}]}, 0x10) [ 300.397482] team0 (unregistering): Port device team_slave_0 removed [ 300.457885] team0 (unregistering): Port device team_slave_1 removed [ 300.543305] hrtimer: interrupt took 86027 ns [ 300.737149] IPVS: ftp: loaded support on port[0] = 21 [ 300.841623] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.848191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.855424] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.862031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.871663] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 301.522246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.395098] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.401756] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.410147] device bridge_slave_0 entered promiscuous mode [ 302.494635] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.501179] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.509607] device bridge_slave_1 entered promiscuous mode [ 302.600324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 302.682667] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 302.931019] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 303.017245] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 303.424428] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 303.432693] team0: Port device team_slave_0 added [ 303.516375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 303.525154] team0: Port device team_slave_1 added [ 303.612545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 303.620125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.629362] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.715457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 303.722534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.731529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.819198] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 303.826949] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.836009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.922310] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 303.930204] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.939448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 304.727879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.863953] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.870533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.877723] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.884215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.893130] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 305.065145] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 305.377002] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 305.383440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 305.391421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 305.582655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 305.716883] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.137223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.329727] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 308.521066] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 308.527353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 308.535387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 02:43:36 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:36 executing program 4: socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x0, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x0, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x0, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80007, 0x732) socket$inet_smc(0x2b, 0x1, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x803, 0xffffffffdffffffe) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r0) getresuid(&(0x7f0000000440), &(0x7f0000000380), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(0x0, &(0x7f0000000100)={0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x0, 0x5, 0xf6b8}) getpgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000005c0)=r6) 02:43:36 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000}) 02:43:36 executing program 0: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x6, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local, @dev, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2]}, {[@multicast1]}, {}, {[@loopback]}, {[@broadcast]}, {[@multicast1]}, {[@dev]}]}]}}}}}}}, 0x0) 02:43:36 executing program 1: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000c03000)=[@in], 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00009baffc), 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000564000), 0x0) [ 308.748459] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! [ 308.978606] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.293604] Unknown ioctl 19300 [ 311.298741] Unknown ioctl 35092 [ 311.303052] Unknown ioctl -2146914560 [ 311.307077] Unknown ioctl 35156 [ 311.310542] Unknown ioctl 1074287980 [ 311.315192] Unknown ioctl -1071094779 [ 311.320231] Unknown ioctl -1072667610 [ 311.325081] Unknown ioctl 19462 [ 311.329354] Unknown ioctl 1076129799 [ 311.337909] Unknown ioctl 19300 02:43:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x68) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x27}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 02:43:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 02:43:39 executing program 2: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000") fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) pread64(r1, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000000340)=""/144, 0x90) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000001080)}], 0x1, 0x4010) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000100)) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[]}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) dup2(r0, r3) write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x68, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev}, @in6, @in={0x2, 0x0, @dev}, @in, @in]}, 0x0) 02:43:39 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0xa, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 02:43:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:39 executing program 4: socket$inet6(0xa, 0x20800a2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r2, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x0, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x0, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x0, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80007, 0x732) socket$inet_smc(0x2b, 0x1, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x803, 0xffffffffdffffffe) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r0) getresuid(&(0x7f0000000440), &(0x7f0000000380), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) utime(0x0, &(0x7f0000000100)={0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x0, 0x5, 0xf6b8}) getpgid(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000005c0)=r6) [ 311.342945] Unknown ioctl 35092 [ 311.346739] Unknown ioctl -2146914560 [ 311.350810] Unknown ioctl 35156 [ 311.351304] Unknown ioctl 1074287980 [ 311.358902] Unknown ioctl -1071094779 [ 311.364023] Unknown ioctl -1072667610 [ 311.365725] Unknown ioctl 19462 [ 311.372476] Unknown ioctl 1076129799 [ 311.547474] input: syz0 as /devices/virtual/input/input5 02:43:39 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000000c0), 0x1000001d1) tee(r3, r2, 0xfffffffffffffffd, 0x0) read(r1, &(0x7f0000000200)=""/250, 0x4ba09e13) 02:43:39 executing program 0: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x800a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x60000008}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setxattr(0x0, 0x0, 0x0, 0x0, 0x0) 02:43:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:39 executing program 5: setrlimit(0x6, &(0x7f0000000000)) mlockall(0x3) r0 = open(&(0x7f0000000040)='./file0\x00', 0x12a02, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x10, r0, 0x0) 02:43:40 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) 02:43:40 executing program 5: 02:43:40 executing program 2: 02:43:40 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x803, 0x3) 02:43:40 executing program 5: 02:43:40 executing program 4: 02:43:40 executing program 2: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 02:43:40 executing program 5: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="74756e6c30000000001000", 0x10) sendmsg$inet_sctp(r0, &(0x7f00000026c0)={&(0x7f0000000100)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000000240)="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", 0x5a9}], 0x1}, 0x8000) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 02:43:40 executing program 1: 02:43:41 executing program 0: 02:43:41 executing program 4: 02:43:41 executing program 2: 02:43:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x803, 0x3) 02:43:41 executing program 1: 02:43:41 executing program 5: 02:43:41 executing program 4: 02:43:41 executing program 2: 02:43:41 executing program 0: 02:43:41 executing program 1: 02:43:41 executing program 2: 02:43:41 executing program 5: 02:43:41 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x803, 0x3) 02:43:41 executing program 5: 02:43:41 executing program 0: 02:43:41 executing program 4: 02:43:41 executing program 2: 02:43:42 executing program 1: 02:43:42 executing program 2: 02:43:42 executing program 5: 02:43:42 executing program 4: 02:43:42 executing program 0: 02:43:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:42 executing program 1: 02:43:42 executing program 5: 02:43:42 executing program 0: 02:43:42 executing program 4: 02:43:42 executing program 2: 02:43:42 executing program 1: 02:43:42 executing program 0: 02:43:42 executing program 5: 02:43:42 executing program 4: 02:43:42 executing program 2: 02:43:42 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:42 executing program 0: 02:43:43 executing program 1: 02:43:43 executing program 4: 02:43:43 executing program 2: 02:43:43 executing program 5: 02:43:43 executing program 0: 02:43:43 executing program 4: 02:43:43 executing program 1: 02:43:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:43 executing program 5: 02:43:43 executing program 2: 02:43:43 executing program 0: 02:43:43 executing program 4: 02:43:43 executing program 2: 02:43:43 executing program 1: 02:43:43 executing program 5: 02:43:43 executing program 4: 02:43:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:43 executing program 1: 02:43:43 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)) ioctl$KDSKBLED(r0, 0x4b65, 0x6) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) sysfs$2(0x2, 0x8001, &(0x7f0000000080)=""/95) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000140)={0xffffffffffff7fff, 0x6, 0xb, &(0x7f0000000100)="eb5bf3aa78db4abf7d9916"}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000180)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x10000, 0x1, 0x6}) r1 = shmget$private(0x0, 0x4000, 0x78001022, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) futimesat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={{}, {0x77359400}}) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000340)=""/114) 02:43:44 executing program 5: setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) llistxattr(0x0, 0x0, 0xffffffffffffff7f) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mknodat(r0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) clock_gettime(0x0, 0x0) utimensat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 02:43:44 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8090, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) sendto$inet6(r2, &(0x7f0000f6f000), 0x0, 0x20000003, 0x0, 0x0) 02:43:44 executing program 1: r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fallocate(r0, 0x11, 0x0, 0x100000001) 02:43:44 executing program 0: 02:43:44 executing program 4: 02:43:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:44 executing program 5: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x800009, 0x40000000004}) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 02:43:44 executing program 2: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x8000400) r1 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getflags(r1, 0x401) 02:43:44 executing program 1: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x9, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x0, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x0, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x0, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80007, 0x732) ioctl(r5, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socket$inet_smc(0x2b, 0x1, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) getresuid(&(0x7f0000000440), &(0x7f0000000380), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(0x0, &(0x7f0000000100)={0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8}) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r7) 02:43:44 executing program 0: r0 = socket$kcm(0x11, 0xa, 0x300) recvmsg$kcm(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)=""/18, 0x12}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="bd02bbb8c682e6f22eb2eb9e0498", 0x0}, 0x28) 02:43:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback, @remote}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @remote, @remote}, 0xc) 02:43:44 executing program 3: ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:45 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 02:43:45 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) epoll_pwait(r0, 0x0, 0x0, 0x6, &(0x7f00000003c0)={0x6}, 0x8) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000006c0)=0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000700)=r3) fcntl$getownex(r1, 0x10, &(0x7f0000000080)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="000007000000000052010000ffffffff79000000000000000000000000000000cb47ba143ecdbf35c6e47c791f4ade381c3fdd0def38e23c875ebb5d18a4e209bee6c2525ddaeedc69ded578b99ea1b950e0031be18995e968feb1bc1a6d84327c2cbd7808f062c827d987e2fc301f21d0d6b847843d07b5cfad60154a4ef4860321c36d6d63e917fd871989327ea2c210adc8b4ba660705ecf1fe2747b5d2d27b5533d767b950add01a6682ef4d0ced7d0b94cc2a20569610c05c7088494c1b188a59755d378b01381be5c0721e570e8c62598fc39e1699c325b9c645d2f3d37728d8c6d2c7d5d0818f7a0e8c3bd1ee2ff2a30063d67dd06dc794f00e56f309f196d27cd254c09c4df0ccfb51fa4a9b8e0d1cc93a350a9eac248316aecb9cfce7b317e57999bf9e2d485cf9c8f48575fa242996bfcc63220349ebb16bb034164dca64d58ee77204b25ce253af5353ce00e93977f2"], 0x155) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x2, 0x0, "de2f9374eef2cb796a067b9b0e5ef521b0009c72b44062f473388a91a75fed48344a989be7bcb34232f1d7a722814cec3b8d69dcf54ccbe17d163d9bd7ef30ed100ed9bfeee58840a88aa303f20562fd"}, 0xd8) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="aab2d3737fef51000000000630"], 0xd) r4 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) uselib(&(0x7f0000000380)='./file0\x00') sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, 0x600, 0x0, 0x2}, 0xfffc}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000240)={{0x0, 0x0, 0x1000, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040), 0x0, [], [0x0, 0x48000000000, 0x0, 0xffffffff]}) 02:43:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000) fstatfs(r0, &(0x7f0000000440)=""/40) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x10) close(r1) 02:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") [ 317.369527] sctp: failed to load transform for md5: -2 02:43:45 executing program 2: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f00000000c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 02:43:45 executing program 5: close(0xffffffffffffffff) utimes(0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f905}) close(0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280), 0x4) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x149082, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 02:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:45 executing program 4: syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x800000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f6578650000000000000f1ce3000000000000000000000000") fcntl$setstatus(r0, 0x4, 0x14400) mprotect(&(0x7f0000104000/0x3000)=nil, 0x3000, 0x0) pread64(r0, &(0x7f0000003c00)=""/4096, 0xffffff72, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105518, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000000)) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) write$smack_current(0xffffffffffffffff, &(0x7f0000000040)='usercgroup\x00', 0xb) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) 02:43:45 executing program 2: socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) utimes(0x0, &(0x7f0000000240)={{}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x4, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x3, 0x100000000098f905}) close(r0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, &(0x7f0000000240), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000280), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x149082, 0x0) sendto$inet(r1, &(0x7f0000000000)="bc2cbf195c246a66b3d2a22563c5c12e7a323a6d78a98b8caeabefb6c4e39bb37c4c313ff0f2ed9c9980c68731fe09ac71f70fc23c651bf350e8039afef5106a986f70f8849ac47df594ee35de9c472137cec83ef72fa6a963c43963e33d1b3142562a793dc960a837b9496fee583101e321c8fec0f717954a873c54ada81b335d784d1e26a0ff2edb257bf443221956b7f3fcdde5ab6423a075761662826b47b36471417ca6179bf149b10b8d0ac49e", 0xb0, 0x7fe, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r1, &(0x7f00000000c0), 0xa) mknod(&(0x7f0000000300)='./file0\x00', 0x98, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@dev, @in=@multicast2}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r2) rmdir(&(0x7f00000000c0)='./file0\x00') 02:43:45 executing program 0: 02:43:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:46 executing program 5: 02:43:46 executing program 0: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xfffffffffffffffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) 02:43:46 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x20004001) ioctl$BLKZEROOUT(r0, 0x1277, &(0x7f0000000140)={0x10}) [ 318.242882] audit: type=1326 audit(1544841826.294:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8526 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ba code=0xffff0000 02:43:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000380)=0x200000000) fstatfs(r0, &(0x7f0000000440)=""/40) readv(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/172, 0xac}], 0x10) close(r1) 02:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:43:46 executing program 4: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x800a) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x60000008}) epoll_wait(r2, &(0x7f00000005c0)=[{}], 0x123b, 0x1ff) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 02:43:46 executing program 5: [ 318.420036] device team0 entered promiscuous mode [ 318.425120] device team_slave_0 entered promiscuous mode [ 318.430952] device team_slave_1 entered promiscuous mode 02:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") [ 318.467747] device team0 left promiscuous mode [ 318.472549] device team_slave_0 left promiscuous mode [ 318.478137] device team_slave_1 left promiscuous mode [ 318.496336] team0 (unregistering): Port device team_slave_0 removed [ 318.547687] team0 (unregistering): Port device team_slave_1 removed 02:43:46 executing program 5: 02:43:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:43:46 executing program 5: [ 318.960783] audit: type=1326 audit(1544841827.014:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8526 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45a4ba code=0xffff0000 [ 319.015056] device team0 entered promiscuous mode [ 319.073709] device team0 left promiscuous mode 02:43:47 executing program 0: 02:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:47 executing program 1: 02:43:47 executing program 5: 02:43:47 executing program 0: 02:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:43:47 executing program 4: [ 319.513368] device team0 entered promiscuous mode 02:43:47 executing program 5: 02:43:47 executing program 0: [ 319.553924] device team0 left promiscuous mode 02:43:47 executing program 4: 02:43:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:47 executing program 0: 02:43:47 executing program 1: 02:43:47 executing program 5: 02:43:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 02:43:48 executing program 4: 02:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:48 executing program 1: [ 320.045001] device team0 entered promiscuous mode 02:43:48 executing program 0: [ 320.084387] device team0 left promiscuous mode 02:43:48 executing program 5: 02:43:48 executing program 4: 02:43:48 executing program 1: 02:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:48 executing program 5: 02:43:48 executing program 0: 02:43:48 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl(r3, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:48 executing program 4: [ 320.567627] device team0 entered promiscuous mode 02:43:48 executing program 5: [ 320.607484] device team0 left promiscuous mode 02:43:48 executing program 0: 02:43:48 executing program 1: 02:43:48 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:48 executing program 4: 02:43:48 executing program 0: 02:43:49 executing program 5: 02:43:49 executing program 1: 02:43:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x803, 0x3) 02:43:49 executing program 0: 02:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:49 executing program 4: 02:43:49 executing program 5: [ 321.183646] device team0 entered promiscuous mode [ 321.214900] device team0 left promiscuous mode 02:43:49 executing program 0: 02:43:49 executing program 1: 02:43:49 executing program 4: 02:43:49 executing program 5: 02:43:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x803, 0x3) 02:43:49 executing program 0: 02:43:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:49 executing program 1: [ 321.662623] device team0 entered promiscuous mode 02:43:49 executing program 5: [ 321.728319] device team0 left promiscuous mode 02:43:49 executing program 1: 02:43:49 executing program 4: 02:43:49 executing program 0: 02:43:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) socket$inet6(0xa, 0x803, 0x3) 02:43:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x0, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:50 executing program 1: 02:43:50 executing program 4: 02:43:50 executing program 0: [ 322.123367] device team0 entered promiscuous mode 02:43:50 executing program 5: [ 322.174507] device team0 left promiscuous mode 02:43:50 executing program 0: 02:43:50 executing program 1: 02:43:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x201}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:50 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:50 executing program 4: 02:43:50 executing program 5: 02:43:50 executing program 1: 02:43:50 executing program 0: [ 322.618544] device team0 entered promiscuous mode 02:43:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x201}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:50 executing program 4: [ 322.695186] device team0 left promiscuous mode 02:43:50 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}]}, 0x2c}}, 0x0) 02:43:50 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000400)=""/229) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 02:43:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x0, 0x0) dup2(r2, r0) 02:43:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x201}, 0x20}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:51 executing program 0: [ 323.100498] device team0 entered promiscuous mode [ 323.118459] [drm:drm_calc_timestamping_constants] *ERROR* crtc 29: Can't calculate constants, dotclock = 0! [ 323.140912] device team0 left promiscuous mode 02:43:51 executing program 1: 02:43:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:51 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:51 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c2d023c126285718070") ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000}) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vhci\x00', 0x0, 0x0) dup2(r2, r0) 02:43:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001480)={r2, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:51 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:51 executing program 0: 02:43:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:51 executing program 4: [ 323.815528] device team0 entered promiscuous mode [ 323.864683] device team0 left promiscuous mode 02:43:52 executing program 0: 02:43:52 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:52 executing program 4: 02:43:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:52 executing program 4: 02:43:52 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:52 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, 0x0, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 02:43:52 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) dup3(r3, r2, 0x0) 02:43:52 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigsuspend(&(0x7f00000000c0), 0x8) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x1000000000015) 02:43:52 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) dup3(r3, r2, 0x0) 02:43:53 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x400000000e) ioctl$PIO_UNISCRNMAP(r0, 0x5412, &(0x7f0000000a40)) 02:43:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 02:43:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) dup3(r3, r2, 0x0) 02:43:53 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) 02:43:53 executing program 0: r0 = socket$inet6(0xa, 0x20800a2, 0x0) ioctl(r0, 0x9, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000640)='/dev/net/tun\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000780)={@un=@abs={0x1, 0x0, 0x4e21}, {&(0x7f0000000680)=""/183, 0x2f1}, &(0x7f0000000300)}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)="2e2f6367726f75d9b6a30000008000000000", 0x1ff) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x141000, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000540)='/dev/dsp#\x00', 0x7, 0x10000) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000740)={0xfffffffffffffffd, 0x7fff}) io_setup(0x0, &(0x7f0000000080)) io_destroy(0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\'', 0x1ff) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r5 = perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x9, 0x0, 0x11, 0xfffffffffffff722, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001, 0x7, 0x7fff, 0x0, 0x7f, 0x7, 0x20, 0x4, 0x7f, 0x0, 0x8, 0x0, 0x100000000, 0x0, 0x8, 0xffffffffffffd5c2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x8026, 0x5, 0x0, 0x1, 0x7, 0xfffffffffffffff8, 0x9}, 0x0, 0xc, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x80007, 0x732) ioctl(r6, 0x8912, &(0x7f0000000000)="0a5cc80700315f85715070") socket$inet_smc(0x2b, 0x1, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r7) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x803, 0xffffffffdffffffe) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x94) close(r1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000140)={@local, 0x12b, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, 0xfffffffffffffde6) getresuid(&(0x7f0000000440), &(0x7f0000000380), &(0x7f0000000640)) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) utime(0x0, &(0x7f0000000100)={0x0, 0x6}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a45323, &(0x7f0000000480)={{0x80000000000000, 0xffffffff}, 'port1\x00', 0x20, 0x100000, 0x2, 0x5, 0x5, 0xf6b8}) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f0000000200)) getpgid(0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000580)={0x0, 0x0}) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f00000005c0)=r10) 02:43:53 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000080)='team0\x00') socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001440)={'team0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x201, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}]}, 0x34}}, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000240)="0a5c2d023c126285718070") 02:43:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000480), 0x8) dup3(r3, r2, 0x0) 02:43:54 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000640)={0x6c, r1, 0x201, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @remote, 0x1ff}}, {0x9, 0x2, @in6={0xa, 0x0, 0x0, @loopback={0xff0f000000000000}}}}}]}]}, 0x6c}}, 0x0) 02:43:54 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0a5c2d023c126285718070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x20002) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = accept4(r1, 0x0, 0x0, 0x0) connect(r3, &(0x7f00007a8000)=@generic={0x0, "8c36b043d081c3c1503af6a768406b9267f60ac286da2338bd8e3f6ba990189977170a0705ea90c13e26ba0b966b9b9d3289c8784f16963ce7c312649ce2996cd4e7126f704ab2546e516d216ed2fb7a95ff906185874a2d44029a01f46a380e73c5477efe9e01548612afd6c667be500d748038f499a492ef8fe4e62653"}, 0x80) [ 326.426590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor4'. [ 326.435371] Started in network mode [ 326.439145] Own node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 326.447624] ================================================================== [ 326.455024] BUG: KMSAN: uninit-value in __inet6_bind+0xb35/0x1a30 [ 326.461288] CPU: 1 PID: 8872 Comm: syz-executor4 Not tainted 4.20.0-rc5+ #2 [ 326.468403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.477772] Call Trace: [ 326.480402] dump_stack+0x1c9/0x220 [ 326.484072] kmsan_report+0x12d/0x290 [ 326.487912] __msan_warning+0x76/0xc0 [ 326.491760] __inet6_bind+0xb35/0x1a30 [ 326.495711] inet6_bind+0x206/0x300 [ 326.499389] ? ipv6_mod_enabled+0x60/0x60 [ 326.503576] kernel_bind+0xc6/0xf0 [ 326.507157] udp_sock_create6+0x2ee/0x890 [ 326.511374] tipc_udp_enable+0x166f/0x1d70 [ 326.515721] ? tipc_udp_send_msg+0x7d0/0x7d0 [ 326.520164] __tipc_nl_bearer_enable+0x1213/0x1da0 [ 326.525166] ? mutex_lock+0xd8/0x120 [ 326.528924] tipc_nl_bearer_enable+0x6c/0xb0 [ 326.533378] ? __tipc_nl_bearer_enable+0x1da0/0x1da0 [ 326.538518] genl_rcv_msg+0x185f/0x1a60 [ 326.542558] ? __msan_poison_alloca+0x1e0/0x270 [ 326.547283] netlink_rcv_skb+0x444/0x640 [ 326.551385] ? genl_unbind+0x390/0x390 [ 326.555323] genl_rcv+0x63/0x80 [ 326.558637] netlink_unicast+0xf80/0x1060 [ 326.562856] netlink_sendmsg+0x129d/0x1310 [ 326.567160] ___sys_sendmsg+0xdbc/0x11d0 [ 326.571263] ? netlink_getsockopt+0x15f0/0x15f0 [ 326.575979] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 326.581401] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 326.586795] ? __fget_light+0x714/0x780 [ 326.590850] __se_sys_sendmsg+0x305/0x460 [ 326.595068] __x64_sys_sendmsg+0x4a/0x70 [ 326.599172] do_syscall_64+0xcd/0x110 [ 326.603011] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 326.608222] RIP: 0033:0x457659 [ 326.611445] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.630373] RSP: 002b:00007f32339d5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.638108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457659 [ 326.645396] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000003 [ 326.652685] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.659972] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32339d66d4 [ 326.667508] R13: 00000000004c421b R14: 00000000004d7160 R15: 00000000ffffffff [ 326.674815] [ 326.676465] Local variable description: ----udp6_addr@udp_sock_create6 [ 326.683141] Variable was created at: [ 326.686886] udp_sock_create6+0x80/0x890 [ 326.690970] tipc_udp_enable+0x166f/0x1d70 [ 326.695210] ================================================================== [ 326.702579] Disabling lock debugging due to kernel taint [ 326.708043] Kernel panic - not syncing: panic_on_warn set ... [ 326.713958] CPU: 1 PID: 8872 Comm: syz-executor4 Tainted: G B 4.20.0-rc5+ #2 [ 326.722459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.731830] Call Trace: [ 326.734467] dump_stack+0x1c9/0x220 [ 326.738137] panic+0x3f0/0x98f [ 326.741417] kmsan_report+0x290/0x290 [ 326.745260] __msan_warning+0x76/0xc0 [ 326.749103] __inet6_bind+0xb35/0x1a30 [ 326.753216] inet6_bind+0x206/0x300 [ 326.756896] ? ipv6_mod_enabled+0x60/0x60 [ 326.761075] kernel_bind+0xc6/0xf0 [ 326.764663] udp_sock_create6+0x2ee/0x890 [ 326.768879] tipc_udp_enable+0x166f/0x1d70 [ 326.773233] ? tipc_udp_send_msg+0x7d0/0x7d0 [ 326.777684] __tipc_nl_bearer_enable+0x1213/0x1da0 [ 326.782690] ? mutex_lock+0xd8/0x120 [ 326.786444] tipc_nl_bearer_enable+0x6c/0xb0 [ 326.790896] ? __tipc_nl_bearer_enable+0x1da0/0x1da0 [ 326.796024] genl_rcv_msg+0x185f/0x1a60 [ 326.800057] ? __msan_poison_alloca+0x1e0/0x270 [ 326.804779] netlink_rcv_skb+0x444/0x640 [ 326.808877] ? genl_unbind+0x390/0x390 [ 326.812813] genl_rcv+0x63/0x80 [ 326.816137] netlink_unicast+0xf80/0x1060 [ 326.820343] netlink_sendmsg+0x129d/0x1310 [ 326.824648] ___sys_sendmsg+0xdbc/0x11d0 [ 326.828751] ? netlink_getsockopt+0x15f0/0x15f0 [ 326.833464] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 326.838873] ? __msan_metadata_ptr_for_load_1+0x10/0x20 [ 326.844262] ? __fget_light+0x714/0x780 [ 326.848292] __se_sys_sendmsg+0x305/0x460 [ 326.852504] __x64_sys_sendmsg+0x4a/0x70 [ 326.856594] do_syscall_64+0xcd/0x110 [ 326.860424] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 326.865632] RIP: 0033:0x457659 [ 326.868852] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.887774] RSP: 002b:00007f32339d5c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.895503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457659 [ 326.902794] RDX: 0000000000000000 RSI: 00000000200008c0 RDI: 0000000000000003 [ 326.910089] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.917382] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f32339d66d4 [ 326.924666] R13: 00000000004c421b R14: 00000000004d7160 R15: 00000000ffffffff [ 326.932948] Kernel Offset: disabled [ 326.936579] Rebooting in 86400 seconds..