tpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000440)) clock_gettime(0x0, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)) utimes(&(0x7f00000003c0)='\x00', &(0x7f0000000480)={{0x77359400}, {0x0, 0x7530}}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) fcntl$F_SET_FILE_RW_HINT(r7, 0x40e, &(0x7f0000000180)=0x3) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000340)=r6) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000340)=r10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$FUSE_DEV_IOC_CLONE(r11, 0x8004e500, &(0x7f0000000340)=r13) ioctl$SIOCRSSCAUSE(r13, 0x89e1, &(0x7f0000000380)=0x4) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:18:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x8000, 0x200, 0x6, 0x1, 0x7fff, 0x3ff, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0xb4}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 426.990329] device bridge_slave_1 left promiscuous mode [ 426.996219] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.072998] device bridge_slave_0 left promiscuous mode [ 427.080692] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.252194] device hsr_slave_1 left promiscuous mode [ 427.294132] device hsr_slave_0 left promiscuous mode [ 427.334228] team0 (unregistering): Port device team_slave_1 removed [ 427.360756] team0 (unregistering): Port device team_slave_0 removed [ 427.382189] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 427.425933] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 427.505592] bond0 (unregistering): Released all slaves [ 429.381151] IPVS: ftp: loaded support on port[0] = 21 [ 430.223638] IPVS: ftp: loaded support on port[0] = 21 [ 430.286795] chnl_net:caif_netlink_parms(): no params data found [ 430.351291] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.357873] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.365978] device bridge_slave_0 entered promiscuous mode [ 430.391275] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.398821] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.406414] device bridge_slave_1 entered promiscuous mode [ 430.426169] chnl_net:caif_netlink_parms(): no params data found [ 430.438572] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 430.451891] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 430.478418] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 430.486718] team0: Port device team_slave_0 added [ 430.493061] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 430.500851] team0: Port device team_slave_1 added [ 430.514342] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 430.526858] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 430.593916] device hsr_slave_0 entered promiscuous mode [ 430.640494] device hsr_slave_1 entered promiscuous mode [ 430.680545] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.687031] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.694715] device bridge_slave_0 entered promiscuous mode [ 430.706932] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 430.715283] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.722246] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.729464] device bridge_slave_1 entered promiscuous mode [ 430.736012] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 430.758410] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 430.768340] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 430.796599] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 430.804093] team0: Port device team_slave_0 added [ 430.810433] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 430.817726] team0: Port device team_slave_1 added [ 430.824473] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 430.833276] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 430.904037] device hsr_slave_0 entered promiscuous mode [ 430.940628] device hsr_slave_1 entered promiscuous mode [ 430.981301] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 430.989246] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 430.999949] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.006879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.014032] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.020768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.044803] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.051867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.058883] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.065862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.115273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.123614] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 431.129885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.143801] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 431.151592] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 431.163980] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 431.170233] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.178077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.185694] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.193580] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.201489] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.209507] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.218386] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.228415] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 431.235277] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.246711] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.255877] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.262667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.270365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.278372] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.284901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.292470] device bridge_slave_1 left promiscuous mode [ 431.298064] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.351407] device bridge_slave_0 left promiscuous mode [ 431.358646] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.451968] device hsr_slave_1 left promiscuous mode [ 431.492966] device hsr_slave_0 left promiscuous mode [ 431.545022] team0 (unregistering): Port device team_slave_1 removed [ 431.555144] team0 (unregistering): Port device team_slave_0 removed [ 431.564950] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 431.614607] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 431.682586] bond0 (unregistering): Released all slaves [ 431.731115] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 431.738470] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.746568] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.753207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.761432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.769194] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.776441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.788072] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 431.799136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 431.806572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.815680] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.825795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 431.835326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.843777] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.851823] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.861424] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 431.871873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.879580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.889210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 431.898467] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 431.906692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.914442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.922638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.930683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.938666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.948145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 432.000478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 432.008515] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 432.022294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 432.034648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 432.042374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 432.061282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 432.068961] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.082457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.094122] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 432.105601] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 432.112357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.119687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 432.140568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.151406] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 432.159350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 432.175662] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 432.184887] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 432.192890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.199889] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.209288] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 432.220818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.232024] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 432.238607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 432.260282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 432.271966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.070269] protocol 88fb is buggy, dev hsr_slave_0 [ 434.075493] protocol 88fb is buggy, dev hsr_slave_1 [ 434.550287] protocol 88fb is buggy, dev hsr_slave_0 [ 434.555774] protocol 88fb is buggy, dev hsr_slave_1 18:18:52 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:18:52 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:18:52 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) pipe(0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000180), 0x4, 0x0, 0x3a3}}, {{0x0, 0x0, &(0x7f00000007c0), 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000, 0x0) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 18:18:52 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x8000, 0x200, 0x6, 0x1, 0x7fff, 0x3ff, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0xb4}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:18:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:18:52 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x1, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x0, 0x54}, [@generic={0x7, 0xf, 0x4, 0x5, 0x4e01}, @jmp={0x5, 0x0, 0x0, 0x6, 0x3, 0x1, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd1}, @jmp={0x5, 0x0, 0x1a, 0x2, 0x9, 0xfffffffffffffff8, 0x10}, @func]}, &(0x7f0000281ffc)='G\xffL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xb}, 0x10}, 0x78) 18:18:52 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000002840)=[{{&(0x7f0000000100)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000200)="e25a", 0x2}], 0x1, &(0x7f0000000180)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@rr={0x7, 0xb, 0x8, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}], 0x20}}, {{0x0, 0xff3c, 0x0}}], 0x2, 0x0) 18:18:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x10012, 0xffffffffffffffff, 0x7b2e1000) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x33) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$CAPI_REGISTER(r2, 0x400c4301, &(0x7f0000000180)={0x70b, 0x800, 0xc11}) 18:18:53 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3('}, 0x48) 18:18:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:18:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x13, &(0x7f0000000200), 0x8) 18:18:53 executing program 1: socket$inet(0x2, 0x4000000805, 0x0) openat$audio1(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) socket$inet(0x2, 0x4000000805, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000240)={0x12, 0x10, 0xfa00, {&(0x7f0000000080), r2, r0}}, 0x18) 18:18:53 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:18:53 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) ioctl$SNDRV_PCM_IOCTL_INFO(r4, 0x81204101, &(0x7f0000000180)) [ 435.220492] device bridge_slave_1 left promiscuous mode [ 435.226248] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.280988] device bridge_slave_0 left promiscuous mode [ 435.287229] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.443514] device hsr_slave_1 left promiscuous mode [ 435.511948] device hsr_slave_0 left promiscuous mode [ 435.583382] team0 (unregistering): Port device team_slave_1 removed [ 435.597064] team0 (unregistering): Port device team_slave_0 removed [ 435.609207] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 435.674119] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 435.778166] bond0 (unregistering): Released all slaves [ 437.681090] IPVS: ftp: loaded support on port[0] = 21 [ 438.512963] IPVS: ftp: loaded support on port[0] = 21 [ 438.579084] chnl_net:caif_netlink_parms(): no params data found [ 438.630612] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.637097] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.645345] device bridge_slave_0 entered promiscuous mode [ 438.652861] IPVS: ftp: loaded support on port[0] = 21 [ 438.653466] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.665152] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.672285] device bridge_slave_1 entered promiscuous mode [ 438.702968] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 438.728480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 438.771041] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 438.778630] team0: Port device team_slave_0 added [ 438.784567] chnl_net:caif_netlink_parms(): no params data found [ 438.793230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 438.800836] team0: Port device team_slave_1 added [ 438.809994] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 438.824523] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 438.914131] device hsr_slave_0 entered promiscuous mode [ 438.950502] device hsr_slave_1 entered promiscuous mode [ 439.007120] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 439.017134] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 439.037334] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.043912] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.051491] device bridge_slave_0 entered promiscuous mode [ 439.060285] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.066948] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.074258] device bridge_slave_1 entered promiscuous mode [ 439.115854] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 439.169928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 439.178825] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.185462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.192439] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.199232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.232161] chnl_net:caif_netlink_parms(): no params data found [ 439.245405] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 439.253826] team0: Port device team_slave_0 added [ 439.271939] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 439.279320] team0: Port device team_slave_1 added [ 439.292485] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 439.314152] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 439.384123] device hsr_slave_0 entered promiscuous mode [ 439.430492] device hsr_slave_1 entered promiscuous mode [ 439.470484] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.477266] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.485196] device bridge_slave_0 entered promiscuous mode [ 439.496939] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 439.504495] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.512336] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.519922] device bridge_slave_1 entered promiscuous mode [ 439.534399] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 439.548637] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 439.566210] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 439.590695] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.597953] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.615336] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 439.622937] team0: Port device team_slave_0 added [ 439.637143] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 439.646690] team0: Port device team_slave_1 added [ 439.653691] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 439.668411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.676706] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 439.686637] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 439.700965] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 439.709590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 439.723535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 439.733501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 439.742632] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 439.748774] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.803377] device hsr_slave_0 entered promiscuous mode [ 439.840568] device hsr_slave_1 entered promiscuous mode [ 439.881695] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 439.889992] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 439.902891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 439.912630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 439.921798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 439.929647] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.936384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.947879] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 439.959512] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 439.966730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 439.975932] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 439.983808] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.990978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.998100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 440.014884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 440.026963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 440.037625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 440.049138] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 440.058736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 440.067268] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 440.075738] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 440.084108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 440.092679] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 440.103827] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 440.112293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 440.122101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 440.131011] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 440.142746] device bridge_slave_1 left promiscuous mode [ 440.148281] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.191239] device bridge_slave_0 left promiscuous mode [ 440.197138] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.294342] device hsr_slave_1 left promiscuous mode [ 440.333199] device hsr_slave_0 left promiscuous mode [ 440.385707] team0 (unregistering): Port device team_slave_1 removed [ 440.396383] team0 (unregistering): Port device team_slave_0 removed [ 440.406660] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 440.445052] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 440.520803] bond0 (unregistering): Released all slaves [ 440.597981] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 440.607757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 440.615294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 440.627171] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 440.634232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 440.663363] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 440.672443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.682967] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 440.689703] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 440.700153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.707502] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 440.719767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.732027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.743009] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 440.752937] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 440.762539] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 440.769010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.779111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.786347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.793620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 440.804762] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 440.811651] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.866699] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 440.879590] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.889220] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 440.905092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.916485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.926449] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.933110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.948077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 440.961068] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 440.968260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 440.980670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 440.991628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 440.999725] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.006130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.018451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.026559] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.041509] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.048144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.063169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 441.076480] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 441.085065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.096787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.105665] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.112183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.127740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 441.151939] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 441.164652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.183529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 441.189383] overlayfs: workdir and upperdir must reside under the same mount [ 441.206587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 441.216653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 441.224345] overlayfs: workdir and upperdir must reside under the same mount 18:18:59 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/if_inet6\x00') pread64(r0, 0x0, 0x300, 0xd00) 18:18:59 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000180)=0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 441.228618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.245311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 441.268228] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 441.281151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 441.297264] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 441.325104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.344200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.363996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 441.378529] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 441.409969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.422598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.440758] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 441.452275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 441.461994] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 441.476266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.484253] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 441.496631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 441.505094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 441.517875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.525883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.538229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 441.546113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 441.560635] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 441.574731] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 441.582644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.595956] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.603856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 441.616509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 441.626230] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 441.637736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.647899] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 441.660173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 441.686103] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 441.696024] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 441.706759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.713829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.728073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.738334] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 441.747728] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 441.754268] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 441.762401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 441.775436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.510239] protocol 88fb is buggy, dev hsr_slave_0 [ 443.515644] protocol 88fb is buggy, dev hsr_slave_1 18:19:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:02 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x8000, 0x200, 0x6, 0x1, 0x7fff, 0x3ff, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0xb4}, &(0x7f0000000240)=0x8) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:02 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 1: prctl$PR_GET_SECUREBITS(0x1b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000000)="1f000000020141e20c050054a8c984ca029b189f1b882de4e41a0e982de47a", 0x1f) 18:19:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = getpid() write$cgroup_pid(r0, &(0x7f0000000100)=r2, 0xfffffffffffffe69) 18:19:02 executing program 1: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x1601, 0x200) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x1, 0x7, "2d720ae89363b4b8c3ea60eb8eac58ae7195948252807736ed63ed88828ba891", 0x2, 0xb8, 0x1, 0x6, 0x2b}) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x2001001, 0x0) mount$bpf(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x20000000, &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x5004, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0xb) [ 444.001934] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 444.017955] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. 18:19:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 18:19:02 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) link(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r2) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f00000002c0)=0x4) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r5, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/115, 0x73}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/147, 0x93}, {&(0x7f0000000740)=""/59, 0x3b}], 0x2}, 0x55f}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, 0x0, 0xffffff35}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002dc0), 0x0, &(0x7f0000002e00)=""/35, 0x23}}, {{&(0x7f0000001900)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000002ec0)=""/194, 0xc2}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)=""/80, 0x50}, {&(0x7f0000004080)=""/146, 0x92}, {&(0x7f0000004140)=""/85, 0x55}, {&(0x7f00000041c0)=""/253, 0xfd}], 0x7, &(0x7f0000004340)=""/144, 0x90}, 0x5}, {{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004740), 0x0, &(0x7f0000001980)=""/58, 0x3a}, 0xc}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000400)=""/221, 0xdd}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000001a00)=""/79, 0x4f}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/171, 0xab}], 0x5, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x182102, 0x0) ioctl$TIOCSCTTY(r8, 0x540e, 0x0) write(r7, &(0x7f0000000340), 0x41395527) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x7}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x2400000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000e5f000)=0x90) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) mkdir(&(0x7f00000019c0)='./file0\x00', 0xa2) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) [ 444.470174] protocol 88fb is buggy, dev hsr_slave_0 [ 444.476669] protocol 88fb is buggy, dev hsr_slave_1 18:19:02 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) 18:19:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x100040, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0xf, 0x0, 0x7ff, 0x9d9c, r6}, &(0x7f0000000240)=0x10) 18:19:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x8000, 0x200, 0x6, 0x1, 0x7fff, 0x3ff, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0xb4}, &(0x7f0000000240)=0x8) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:03 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x800002, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000000600)=[&(0x7f0000000380)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', &(0x7f00000003c0)='security.selinux\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f0000000500)='security.selinux\x00'], &(0x7f0000000880)=[&(0x7f0000000640)='security.selinux\x00', 0x0, 0x0, &(0x7f0000000800)='^{\t],cpusettrusted\x00', &(0x7f0000000840)='ppp1proc:keyring\x00'], 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x134) fsetxattr$security_selinux(r0, &(0x7f0000000200)='security.selinux\x00', &(0x7f00000001c0)='unconfined_u:system_r:insmod_t:s0-s0:c0.c1023\x00', 0x2af, 0x0) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f00000002c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f00000008c0)="524f7a3e500c5b6f72caa926ee9f61700f3e7229d18c446e5fe44a19575db3a7fa0af373c3b18b09d9301753a4c189bc367f39b729ec04b8ced0c942160e343e8121ce68712cc8476a30aa3281c1bca21e049cdee54c77477dc86fbc11a3252a01b9e736d2aed3b3fb97c48742b3fe68726dd37606d218f8f0060f11d61a298ba8a1143e68b7afbbf8391e35509ad4e39e0a0f8d289589ece549bc3af635e0b35e195ab40c51ecb03c0b306a303f96941eb8ae1980e176080e80979f3661de52b3a85f31af25634607bc5d68f7cff2ca59d5be8e208632425d73f0ed4b542fe35f0f5f6577", 0xe5, 0x0) add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000680)="5fce78cdf5de9c3116e268ea9370c47585e1db0be22ac4cc1ecba0f751c80f9df02a59ee79278a6bf93ee03d6ebdb1c6c194209985ef28a987fa52e2782dea697b48b28c88f767ccdce4c1e4358cec8f5f4612e7748abab6cb30a589532093755d93c79b4b62d17e49b7c82af03c871917f01bb595a18dd5070af188339a48b041c010d348a3d2eaf4edf65bcd07cedbc015eb67e83296555d8c13aec1874129b2065e3b2ed8105d1b4ba3cab0146852376f7e52e076222aa9a023ed607f4ced0f0fe0f35a4fb7fd2ad4d8fc0364c363b3f3120da4898b2d5d178b810cf1154156f958771fe9e633", 0xe8, r1) r2 = syz_open_dev$loop(0x0, 0x0, 0x0) r3 = memfd_create(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000340)=r6) ioctl$sock_TIOCOUTQ(r6, 0x5411, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000c80)={'veth1_to_hsr\x00', &(0x7f0000000680)=ANY=[]}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @multicast1}}}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000100), 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18:19:03 executing program 1: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0x1fc, r2, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x14c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd05628e}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24d9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc56}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x8000}, 0x4014) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fI,', {'rfdno'}, 0x2c, {'wfdno'}}) 18:19:03 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) read$rfkill(r4, &(0x7f0000000100), 0x8) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:03 executing program 1: syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB='dmK0xffffffffffffffff}) io_setup(0xfffffffa, &(0x7f0000000040)=0x0) io_getevents(r3, 0x1, 0x7, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x989680}) r4 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r4) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000000c0)=""/156) r5 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) ioctl(r6, 0x80000001, &(0x7f0000000380)="4631fb4eb7a2a4ca0c26010c22af4e9df707a1d0d041dbdbf04a858c9d10596eb4a1d17d0304d0027bad269c138bd03ee728d5f9b0181f5d9c9509b106f140224ad73787bc4d2a7f657ca026c850dac51083df37c88341c6a25dc473dbca2339d50d215aff780a834502c5c0b037e07d4e7f542f6970a176520b8b30c593a47311") [ 445.016336] 9pnet: Could not find request transport: fI 18:19:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000900010068d16673630000000008000200000020"], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000002800210400"/20, @ANYRES32=r3, @ANYBLOB="ac0c000014000000000000000c0080eb6367726f75700000200002001c0003000300000000000800010062706600040002000400060000ff156569735843de8b4c1ef779b8d8e7bf7afb33e23753792aafde2698ebe5f83bc5b1d2c1df41944400193870e465324b63063fc06b6d0e583c75ba0a6d8da2ca131e39aeef0f"], 0x50}}, 0x0) [ 445.173508] device bridge_slave_1 left promiscuous mode [ 445.179364] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.231019] device bridge_slave_0 left promiscuous mode [ 445.237859] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.442362] device hsr_slave_1 left promiscuous mode [ 445.484532] device hsr_slave_0 left promiscuous mode [ 445.549189] team0 (unregistering): Port device team_slave_1 removed [ 445.577431] team0 (unregistering): Port device team_slave_0 removed [ 445.613001] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 445.684716] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 445.789820] bond0 (unregistering): Released all slaves [ 447.641215] IPVS: ftp: loaded support on port[0] = 21 [ 448.561999] IPVS: ftp: loaded support on port[0] = 21 [ 448.568990] chnl_net:caif_netlink_parms(): no params data found [ 448.605531] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.614992] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.622449] device bridge_slave_0 entered promiscuous mode [ 448.633604] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.640960] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.648500] device bridge_slave_1 entered promiscuous mode [ 448.675958] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 448.687119] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 448.715298] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 448.722873] team0: Port device team_slave_0 added [ 448.735088] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 448.743270] team0: Port device team_slave_1 added [ 448.749143] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 448.757057] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 448.822355] device hsr_slave_0 entered promiscuous mode [ 448.860384] device hsr_slave_1 entered promiscuous mode [ 448.951658] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 448.959085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 449.005093] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.011869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.018628] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.025371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.055557] chnl_net:caif_netlink_parms(): no params data found [ 449.097808] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.104583] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.112299] device bridge_slave_0 entered promiscuous mode [ 449.126965] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.134471] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.142499] device bridge_slave_1 entered promiscuous mode [ 449.163567] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 449.179226] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 449.201832] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 449.214122] team0: Port device team_slave_0 added [ 449.220193] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 449.227559] team0: Port device team_slave_1 added [ 449.233745] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 449.243997] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 449.313153] device hsr_slave_0 entered promiscuous mode [ 449.350392] device hsr_slave_1 entered promiscuous mode [ 449.390988] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 449.401607] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 449.419120] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 449.426009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.434076] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.441645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.452201] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.459239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.475203] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 449.486921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.494895] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.502509] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.511334] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.518869] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.534928] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 449.541697] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.550891] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 449.559723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 449.567380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.575604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.584131] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.590855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.602269] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 449.614122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.623497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.632871] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.640297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.651256] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 449.663977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.678516] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 449.689895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.706081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 449.714568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.725208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.734168] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.747853] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 449.759308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.769716] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.782680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 449.793987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.803245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.811297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.825113] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 449.833375] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 449.842224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.850301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.859600] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 449.867166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 449.875113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.883856] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 449.891017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.903841] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 449.910560] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.924303] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 449.932552] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 449.942370] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.950355] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.958092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.967382] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 449.982435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.990908] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.999728] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.008794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.017757] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 450.027552] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 450.039550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 450.051680] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 450.058100] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.065334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.077366] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 450.086637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 450.102934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.115868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 450.124031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.137136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.145700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.156332] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 450.169496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.178274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.190549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 450.198200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.206862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.226468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 450.234819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.244721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.257116] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 450.263883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.281252] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 450.289733] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 450.299443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.306593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 450.325935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.420424] device bridge_slave_1 left promiscuous mode [ 450.426175] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.471237] device bridge_slave_0 left promiscuous mode [ 450.477005] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.511711] device bridge_slave_1 left promiscuous mode [ 450.518493] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.565599] device bridge_slave_0 left promiscuous mode [ 450.574324] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.710689] protocol 88fb is buggy, dev hsr_slave_0 [ 450.718376] protocol 88fb is buggy, dev hsr_slave_1 [ 450.728550] protocol 88fb is buggy, dev hsr_slave_0 [ 450.736615] protocol 88fb is buggy, dev hsr_slave_1 [ 450.854872] device hsr_slave_1 left promiscuous mode [ 450.914441] device hsr_slave_0 left promiscuous mode [ 450.954806] team0 (unregistering): Port device team_slave_1 removed [ 450.972106] team0 (unregistering): Port device team_slave_0 removed [ 450.983144] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 451.034760] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 451.106975] bond0 (unregistering): Released all slaves [ 451.190175] protocol 88fb is buggy, dev hsr_slave_0 [ 451.195368] protocol 88fb is buggy, dev hsr_slave_1 [ 451.212063] device hsr_slave_1 left promiscuous mode [ 451.284282] device hsr_slave_0 left promiscuous mode [ 451.325474] team0 (unregistering): Port device team_slave_1 removed [ 451.336541] team0 (unregistering): Port device team_slave_0 removed [ 451.347457] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 451.393374] bond0 (unregistering): Releasing backup interface bond_slave_0 18:19:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 451.461804] bond0 (unregistering): Released all slaves 18:19:09 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:09 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r1, &(0x7f0000007c40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1be}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000028c0), 0x1, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x10b8, 0x8) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000640)=ANY=[], 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x5, @perf_config_ext, 0x0, 0x3f, 0x0, 0x6, 0x0, 0x9, 0x2}, 0x0, 0xffffffeffffffffc, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r4 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x200000000000004) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x40000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000000400)}], 0x3) r6 = socket$netlink(0x10, 0x3, 0x200000000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000080)="480000001400190d09004beafd0d8c560a8447000bffe0064e230f00000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e000000", 0x44}], 0x1) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='\x00\x00.\x00', 0x200080, 0x0) r8 = socket$l2tp(0x18, 0x1, 0x1) poll(&(0x7f0000000240)=[{r3, 0x80}, {r8}, {r5, 0x400}, {r3, 0x10410}, {r6, 0x4000}, {r7, 0x1000}], 0x6, 0x400005) r9 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r9, 0xc0406618, 0x0) 18:19:09 executing program 1: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x60100, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x35}) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) syz_read_part_table(0x0, 0x1bf, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff07000000000000550008000000000000000040000000006300000000000000887700720030b5829237c300000000000080000055aa", 0x40, 0x1c0}]) 18:19:09 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) flistxattr(r0, &(0x7f0000000200)=""/22, 0x16) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffff18, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xbe27}, 0x0, 0x6, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x8) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000100)={0x2, 0x46, &(0x7f0000000180)="b03fce8d008f60e1f2ba0466db17b2b85ac39252570a29f434423f23a42594b56286d92ab38882556157b75b6616d83a0a432c6827a13a8ede4a9cfad4c97af9c1907a52eacb"}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 18:19:09 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x8000, 0x200, 0x6, 0x1, 0x7fff, 0x3ff, r4}, &(0x7f00000001c0)=0x20) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r5, 0xb4}, &(0x7f0000000240)=0x8) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="7c846ba18053acc9cfd1d546ede73138cc8da7135b3fba3254c00e0abed7d7fd2193f5f23fda798bdc7c2cb9b491", 0x2e}, {&(0x7f00000001c0)="da3b71b4d9c53d2e46e9738d8f5e5462ed58fe5ae95c609730a98808799e1209ec05506ff7e0229da387863965e9fc6cd2167d0896c27c6f945dc5be3d5c1dd1519880f613bbc3822c3ec8107794bc2fd203ceaac33a1a2790457ffa9199cce387185de5ae1e5250d6a619c4ff27523c5f58087ee05617ba6c5bbfbbd96788eed60be9bb2380fb6fd66e1b7ba4791819c82d22c897965cc0268e190d6215df", 0x9f}], 0x2) 18:19:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000100), 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 451.785525] loop1: p1 p2[EZD] p3 p4 [ 451.790765] loop1: partition table partially beyond EOD, truncated 18:19:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 451.845558] loop1: p1 start 1 is beyond EOD, truncated [ 451.869649] loop1: p2 size 1073741824 extends beyond EOD, truncated [ 451.893684] loop1: p3 size 1912633224 extends beyond EOD, truncated [ 451.938915] loop1: p4 size 32768 extends beyond EOD, truncated 18:19:10 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = gettid() tkill(r2, 0x21) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100)={0x2000, 0x2, 0xfa, 0x6}, 0x6) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000200)=""/92, &(0x7f0000000280)=0x5c) ptrace$cont(0x9, r2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x8000000000000000}, r2, 0x0, 0xffffffffffffffff, 0x9) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) shutdown(r6, 0x1) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 18:19:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000100), 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:10 executing program 1: setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000004c0)=0x3, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000640)="da7e2999", 0xffffff59, 0x0, 0x0, 0x34f) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000540)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000500)={'dummy0\x00', {0x2, 0x0, @remote}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000680), &(0x7f00000006c0)=0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000480)={0x0, @rand_addr, @local}, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm_plock\x00', 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18:19:10 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000100)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 454.861576] IPVS: ftp: loaded support on port[0] = 21 [ 455.658404] chnl_net:caif_netlink_parms(): no params data found [ 455.672133] IPVS: ftp: loaded support on port[0] = 21 [ 455.705707] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.712849] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.719964] device bridge_slave_0 entered promiscuous mode [ 455.735188] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.741737] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.748875] device bridge_slave_1 entered promiscuous mode [ 455.777764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 455.789007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 455.809442] IPVS: ftp: loaded support on port[0] = 21 [ 455.821334] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 455.830836] team0: Port device team_slave_0 added [ 455.841049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 455.848250] team0: Port device team_slave_1 added [ 455.856048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 455.865395] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 455.922475] device hsr_slave_0 entered promiscuous mode [ 455.960523] device hsr_slave_1 entered promiscuous mode [ 456.036150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 456.061515] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 456.109406] chnl_net:caif_netlink_parms(): no params data found [ 456.128846] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.135420] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.142115] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.148478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.242752] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.249470] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.257325] device bridge_slave_0 entered promiscuous mode [ 456.264592] chnl_net:caif_netlink_parms(): no params data found [ 456.285254] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.292162] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.300562] device bridge_slave_1 entered promiscuous mode [ 456.321887] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 456.337350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.377033] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 456.384618] team0: Port device team_slave_0 added [ 456.397728] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 456.405539] team0: Port device team_slave_1 added [ 456.415743] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.422446] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.430712] device bridge_slave_0 entered promiscuous mode [ 456.438750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 456.453772] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.460708] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.467809] device bridge_slave_1 entered promiscuous mode [ 456.481267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 456.497502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 456.508024] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.547887] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 456.557133] team0: Port device team_slave_0 added [ 456.614177] device hsr_slave_0 entered promiscuous mode [ 456.660661] device hsr_slave_1 entered promiscuous mode [ 456.701048] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 456.708648] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 456.717207] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 456.725022] team0: Port device team_slave_1 added [ 456.734109] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.742828] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.754371] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 456.769175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.776419] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 456.805809] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 456.852666] device hsr_slave_0 entered promiscuous mode [ 456.890705] device hsr_slave_1 entered promiscuous mode [ 456.931324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 456.939129] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 456.949956] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 456.957532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.965533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.973849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 456.984346] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 456.991648] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.009109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 457.019680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.028803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.037362] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.043979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.062775] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 457.071059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 457.078525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.088984] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.097992] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.104551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.118777] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 457.130226] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 457.137307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.146275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.173296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 457.184211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.193244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.203405] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.217449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 457.228147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.235254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.244557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.257432] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 457.276454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.287815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 457.298187] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 457.304976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.313200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.321902] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 457.330336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 457.337150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.344811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.351890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.359368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.372668] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 457.378747] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.387712] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 457.394192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.403556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 457.413507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 457.420645] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.428737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.440359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.448434] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.456646] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.463062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.470907] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.488359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 457.497278] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 457.506885] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.515977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.524306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.533093] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.539576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.549759] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 457.559527] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 457.573869] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 457.583416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.592238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.600633] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.608874] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.615556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.623713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.636326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 457.652697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.665077] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 457.673069] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 457.681881] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 457.691642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.699837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.707999] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.714709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.722678] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 457.729585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 457.737048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.744948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.754663] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.763526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 457.771631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 457.779085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.787044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.795411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.806652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 457.818902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.827162] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.838408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.846837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 457.858258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 457.866043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.877429] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.885922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.896823] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 457.903561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.919958] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 457.929432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.938480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.953191] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 457.962728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.971558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.979290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.992582] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 458.000478] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 458.011788] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 458.019131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.029164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.036865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.049902] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.065092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 458.074424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.082917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.093780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.102573] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 458.108697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.126921] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 458.135138] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 458.143224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 458.151306] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 458.164573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.172305] device bridge_slave_1 left promiscuous mode [ 458.178554] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.223829] device bridge_slave_0 left promiscuous mode [ 458.229609] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.291310] device bridge_slave_1 left promiscuous mode [ 458.297396] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.350944] device bridge_slave_0 left promiscuous mode [ 458.356601] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.484601] device hsr_slave_1 left promiscuous mode [ 458.533245] device hsr_slave_0 left promiscuous mode [ 458.574301] team0 (unregistering): Port device team_slave_1 removed [ 458.587534] team0 (unregistering): Port device team_slave_0 removed [ 458.597425] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 458.625584] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 458.702951] bond0 (unregistering): Released all slaves [ 458.793274] device hsr_slave_1 left promiscuous mode [ 458.854452] device hsr_slave_0 left promiscuous mode [ 458.905057] team0 (unregistering): Port device team_slave_1 removed [ 458.917256] team0 (unregistering): Port device team_slave_0 removed [ 458.928302] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 458.954453] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 459.015553] bond0 (unregistering): Released all slaves 18:19:17 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[@ANYBLOB='\\! \t'], 0x4) close(r0) socket$l2tp(0x18, 0x1, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='\x00\x00\x00\x00\x00[\x00\x00\x01\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x0, 0x8, 0x8, 0x5}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) 18:19:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580), 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 18:19:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x40403, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') getsockname(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$mice(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NET_SET(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) write$evdev(r3, &(0x7f0000000140)=[{{0x0, 0x7530}, 0x5, 0x7, 0x80000000}], 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) linkat(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000080)='./file1\x00', 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x40a0) 18:19:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000180)={0x5, 0x6, 0x8000, 0x200, 0x6, 0x1, 0x7fff, 0x3ff, r4}, &(0x7f00000001c0)=0x20) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x8, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x4, 0x0, 0x0, 0x0, 0x101}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0xf7) r4 = dup2(r2, r3) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000000)=""/246) 18:19:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:17 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, @perf_config_ext={0x0, 0x8000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) fdatasync(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 459.708764] overlayfs: filesystem on './file0' not supported as upperdir [ 459.920724] protocol 88fb is buggy, dev hsr_slave_0 [ 459.925959] protocol 88fb is buggy, dev hsr_slave_1 [ 460.150549] protocol 88fb is buggy, dev hsr_slave_0 [ 460.155679] protocol 88fb is buggy, dev hsr_slave_1 [ 460.390151] protocol 88fb is buggy, dev hsr_slave_0 [ 460.395801] protocol 88fb is buggy, dev hsr_slave_1 18:19:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_type(r0, &(0x7f0000000100)='threaded\x00', 0x9) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:18 executing program 5: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="2321202e2f66696c6530202f6465762f6b766d000ac9d927ea2eca43a16a74213c5bb897d793b3ab08e9df47bd1403ef3c2bead6dc2f7f2376382b9aaf2459a41c0de4aa2063ece222bd6dfc502b"], 0x26) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x36d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000540)={'syz0\x00', {0xfa, 0x401, 0x9, 0x400}, 0x8001, [0x5, 0x7fffffff, 0x92, 0x5, 0x4, 0x1, 0x401, 0xffff, 0xcd37, 0x0, 0x3, 0x2, 0x9, 0x4, 0x800, 0x1f, 0x4, 0x8, 0x20, 0x7, 0x3, 0x2, 0x8, 0x7fff, 0x800, 0x2, 0x7f, 0x1, 0x6, 0x55, 0x9, 0x8001, 0x2, 0x7a, 0x200, 0x4, 0x8, 0x1ff, 0x4, 0x80000000, 0x8, 0x7fff, 0xe757, 0xfff, 0x7fff, 0x3, 0x1, 0x2e, 0x200, 0x4, 0x1, 0x40, 0x5, 0x100, 0x81, 0x2, 0x7, 0x1000, 0x100, 0x9, 0xfaa, 0xf06, 0xa1c, 0x8], [0x9, 0xe94, 0x0, 0x5, 0x6, 0x6, 0x0, 0x9, 0x2, 0x1, 0x5, 0x7f, 0x2, 0x5, 0x6832, 0x3, 0x6, 0x6, 0x1, 0x5e66, 0x40, 0x9, 0x6, 0x1, 0x1, 0x7, 0x0, 0x6, 0x2, 0x7f, 0x8, 0x80, 0x9, 0x808000, 0x200, 0x6, 0xeaea067, 0x4, 0x5, 0x8, 0x4, 0xffffff81, 0x8, 0x1f, 0x2, 0x4, 0x4, 0x2, 0x2eb4, 0x101, 0x800, 0x7fffffff, 0xffff7fff, 0x6, 0x0, 0x6, 0x8, 0xe19, 0x4, 0x27ef, 0x2, 0x6, 0x10001, 0x2000], [0x8, 0x51b, 0x6, 0x4, 0x80020001, 0x1, 0xd, 0x6, 0xffffffff, 0x6, 0x7ff, 0x6202, 0xfff, 0x10001, 0x5, 0x80000001, 0x0, 0x2, 0x1, 0x6, 0x6, 0x7, 0x1, 0xff, 0xfffffff8, 0x4, 0x8, 0x6, 0x400, 0xffffffe1, 0x0, 0x6, 0x9, 0x3, 0x0, 0xd127, 0x4, 0x3, 0xffffffff, 0x2004, 0x7fffffff, 0x3ff, 0x400, 0x4, 0x1f, 0x10000, 0x7fff, 0x1f, 0xd5, 0x3ff, 0x5, 0xd3, 0x5, 0x6, 0x6, 0xffffffff, 0xf37, 0x8, 0x10001, 0x760, 0x80, 0x7fffffff, 0x3df, 0x86c], [0xfffffd9f, 0x2, 0x9, 0x4, 0x7, 0x0, 0x0, 0x4, 0x8001, 0x4, 0x1b75007f, 0x4a7, 0x80000001, 0x7, 0x5, 0x1f, 0x1, 0x8, 0x0, 0xffffff81, 0x4, 0x4, 0x7, 0x6, 0x1, 0x100, 0x1000, 0x870a, 0x1, 0x4, 0x4, 0x5, 0x8, 0xf1, 0x0, 0x8000, 0x6, 0x7ff, 0x905, 0x3fb, 0x8cb, 0x7e, 0x0, 0x9, 0x9, 0x48, 0x8, 0x60, 0x200, 0xff, 0xed3, 0x6, 0x81, 0x0, 0x912, 0x81, 0xff, 0x6, 0x6, 0x2, 0x3c1, 0x4, 0xfffffff8, 0x7fff]}, 0x45c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2}, 0x9) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x81800004}, 0xc, &(0x7f0000000e00)={0x0}}, 0x10) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x6000081) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000340)=r7) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000340)=r10) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000000)={0x4, r10, 0x3}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r4, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{0x7ff, 0x7, "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", 0x3, 0x0, 0x8, 0x5, 0x9, 0x8f, 0x4}, r11}}, 0x120) [ 461.110351] protocol 88fb is buggy, dev hsr_slave_0 [ 461.115640] protocol 88fb is buggy, dev hsr_slave_1 18:19:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000100), 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:19 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={r4}, &(0x7f00000002c0)=0x8) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:19 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x1420000a77, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000300)={'team_slave_1\x00', @broadcast}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x8000, 0x0) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000380)=@req3={0xfffffe00, 0x1, 0x4, 0x44, 0x0, 0x1, 0xe68}, 0x1c) socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) read(r8, &(0x7f0000000200)=""/250, 0x50c7e5e2) getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r11, &(0x7f0000001c40)="b193a39e5414fe98d8dacf2f579a4b906d228d070e969bf54e13a714c62205b8ceb28ff374486ae66e7c60275d32edebecc1508151608075cff9d7c67968c660d38b5e994a693dbc5b650465b3083acfef96a8d048ff31e3bd621020f18bd3a4732538096747e7562bdb012c50b9df5cee35e400398c8da1ed58a05b5e29b19bf19f5946cdc768a0289178244fc4d5f5a22be3124fef7cb996887ab150be9278ac4e4be38f9cd32baa8c492afd939ffc405e2970749a8ae116d2afefe4ffc7590dfc44db61156b1f5323b2303fbc98fb8ee66839", 0xd4, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000580)={@loopback, 0x4e, r10}) r12 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0xc) process_vm_writev(r13, &(0x7f0000001880)=[{&(0x7f0000000480)=""/192, 0xc0}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/28, 0x1c}, {&(0x7f0000001700)=""/174, 0xae}, {&(0x7f00000017c0)=""/99, 0x63}, {&(0x7f0000001840)=""/55, 0x37}], 0x6, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/139, 0x8b}, {&(0x7f00000019c0)=""/215, 0xd7}, {&(0x7f0000001ac0)=""/247, 0xf7}, {&(0x7f0000001bc0)=""/24, 0x18}], 0x4, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x20000}, [@IFLA_LINKINFO={0x2c, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x20, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr="af3acb58fc1dea95fd3234c06f11f417"}]}}}]}, 0x4c}}, 0x0) shutdown(r2, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000104000000000000000002000000", @ANYRES32=r5], 0x2}}, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 18:19:19 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:19 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) fcntl$setstatus(r4, 0x4, 0x4000) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:19 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L+', 0x6}, 0x28, 0x2) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r3, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, r3, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x198}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6a2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc0000}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3f}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x57}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @rand_addr=0x7}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x810}, 0x58000) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x4}}, 0x20) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)}, 0x4001041) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x13, 0x119, 0x0, 0x0, {0x1d}}, 0x14}, 0x1, 0xf0ffff}, 0x0) listxattr(&(0x7f0000000400)='./file1\x00', &(0x7f0000000580)=""/90, 0x5a) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 18:19:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT(r0, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$KVM_NMI(r4, 0xae9a) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000240)={r5, 0xe1, 0xbb}, 0x0, &(0x7f0000000380)="4bb23e9109cde315d91b26ae3737d20af4185fa62953cb16aed3b2f2688d14fe386313cb6ea3be99b80b6f81e0ae174b37aff25b1c314c4fbb0726d527acc344f94e36f4914323282e790ed4eabc452751fd51bab466dd0adcaff6b3e702a6a7a643dbc500fc365f9814088f81c59237b23910fc21396319a253610509f480d6bf4271cdf7dceb278a24a9e4326cab026bc1a0a3eade0186aeb39a6184e2394c1ece1e751a4a0d38c275b59b331681a87143d273b8a74ab9f793369b4e0760ca578d981799c9bcdc8638a96f6ba053a75e7c27efa7e03fb785baa7d00dbdac22e6", &(0x7f0000000480)=""/187) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000340)=r8) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000100)={0x0, 0x0, 0xbe, 0xfffc, 0x80}, 0xc) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) fcntl$setstatus(r9, 0x4, 0x2000) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) [ 461.811349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 18:19:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 461.851961] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 [ 461.884647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 [ 461.943275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 18:19:20 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r2) ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000180)={&(0x7f0000000100)=[0x0], 0x1, 0x9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x6, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0xfffffea6) [ 461.988955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 [ 462.066818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 [ 462.121794] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 [ 462.163843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 18:19:20 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) ioctl$VIDIOC_G_AUDIO(r3, 0x80345621, &(0x7f0000000100)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x10012, r4, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x6, 0x120c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000940], 0x0, &(0x7f0000000180), &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x7e, 0x600, 'vlan0\x00', 'hwsim0\x00', 'lo\x00', 'hsr0\x00', @empty, [0xff, 0x0, 0x62441a4f48068cf5, 0x7f, 0xff], @empty, [0x0, 0x80, 0x0, 0x80, 0xff, 0x80], 0xae, 0x156, 0x19e, [@statistic={'statistic\x00', 0x18, {{0x1, 0x1, 0x5, 0xf15, 0x20, 0x80000001}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0xff80, 0x20, 0x1, 0x0, "2e12469f440fcef834d9cccf4e31e5043f012307ad505e16b5b6c55cafce4dd4a947919f99b8a6bbe4dd889042d76f98065ae03c23e518afc064694b95a7b0a9"}}}], @common=@ERROR={'ERROR\x00', 0x20, {"00dcd8d96cb091d6e6f3f53c784ea984d94816358c792808889ace4f3472"}}}, {0x11, 0x4, 0x6000, 'veth1_to_bond\x00', 'veth0\x00', 'ip6gre0\x00', 'lo\x00', @random="706953fbe6ec", [0x0, 0x7f, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x7f, 0x7f, 0x0, 0x0, 0x69ad5c39fd3e11e], 0xde, 0xde, 0x20e, [@stp={'stp\x00', 0x48, {{0x81, {0x3, 0x6a6e, 0x2, @broadcast, [0xff, 0xff, 0x101, 0x0, 0x0, 0xff], 0x4, 0xfffffffd, 0x9, 0xcda, @dev={[], 0x21}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x4e21, 0x4e24, 0x7ff, 0x7, 0x7, 0x1, 0x7, 0x800, 0x0, 0x8}, 0xa82, 0x80}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x5cf9, 'system_u:object_r:sudo_exec_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x10, 0x9, 0x16, 'teql0\x00', 'ip_vti0\x00', 'syzkaller1\x00', 'bond_slave_0\x00', @broadcast, [0x101, 0x0, 0x0, 0xab426553343a73a3, 0xff, 0x1fe], @remote, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x116, 0x15e, 0x18e, [@stp={'stp\x00', 0x48, {{0x6, {0x0, 0xffff, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff, 0xff], 0x4, 0x8, 0xfff, 0xff, @empty, [0xff, 0x0, 0x0, 0xff, 0x0, 0xff], 0x4e21, 0x4e20, 0x9, 0x6, 0x368, 0x8, 0xffff, 0x4, 0x0, 0x2}, 0x10, 0x8}}}, @cluster={'cluster\x00', 0x10, {{0x2db, 0x0, 0x1ff}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"c12899d1a544d3f47988a988e506e71f701e4c39b9f671b6c88e1b59b5cd"}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x100}}}}, {0x11, 0x2, 0x6000, 'bridge_slave_1\x00', 'bond_slave_0\x00', 'teql0\x00', 'bond_slave_1\x00', @local, [0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0xff, 0xff, 0x7f, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1, 0x7f, 0x8, 0x1, 0x0, "92fe0e7dbf96723945382899fdb2d19bbf955150511485fb7be6e52b7ab101d25abfe9503840e428405ae11c7442969604714153b611e1c2988e984d2977a6b5"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x9, 0x10, 0x805, 'gre0\x00', 'bond_slave_0\x00', 'ip6erspan0\x00', 'bpq0\x00', @remote, [0xead68001c669a358], @local, [0x0, 0x80, 0x0, 0x80, 0xff, 0xff], 0x9a6, 0x9f6, 0xa46, [@among={'among\x00', 0x910, {{@offset, @offset, 0x0, {[0x8, 0xa0, 0x7, 0x5, 0x401, 0x7, 0xfffffe01, 0xffffffc1, 0x8001, 0x7, 0xaf, 0x5, 0x7, 0x3, 0x3, 0x6, 0x80000001, 0x7, 0xff, 0x1000, 0x1ff, 0x3, 0x4, 0x3f, 0xfbc, 0x1bc, 0x8000, 0x8, 0x1, 0x401, 0x0, 0x7, 0x2, 0x7, 0x9a, 0x1, 0x3, 0x0, 0xd545, 0x5, 0x10001, 0x8, 0x9, 0x4, 0x3, 0xbe, 0x5, 0xffffffff, 0x6, 0x6, 0x4, 0xfffffffb, 0x1, 0x4, 0x1, 0xba, 0x9, 0x74, 0xfffffffe, 0x6, 0x1f, 0x4, 0x80, 0x1, 0xffffffff, 0x1, 0x9, 0x8, 0x8000, 0x81d, 0x9, 0x0, 0x1f, 0x10, 0x80, 0x2, 0x2, 0x3, 0x3f, 0x0, 0x9, 0x4, 0x5cc5, 0x8, 0x8f89, 0x6, 0xcc, 0xfffffff8, 0x1, 0x7, 0x7e5b, 0x6, 0x0, 0xc21b, 0x6e13, 0x4, 0x5, 0x5, 0x5c, 0x312, 0x81, 0xca5, 0xb4c, 0x5, 0x10000, 0x2, 0x8, 0x0, 0x1000, 0x0, 0x400, 0x0, 0x5, 0x0, 0xfffff9d3, 0x8, 0x1, 0x4, 0xe4f, 0x1, 0xfff, 0x100, 0xffff, 0x20, 0x7, 0xf0, 0x100, 0xa0f5, 0x4000000, 0x8, 0x20ff, 0xd5, 0x1f, 0x40, 0x8000, 0xffffffff, 0x7, 0x1000, 0x7f, 0x2, 0x3, 0x8, 0xfffffffb, 0xc89, 0x0, 0x1, 0x4, 0x0, 0x0, 0x5, 0x6, 0x200000, 0xfff, 0x1000, 0x2, 0x1, 0x100, 0x1f, 0x284, 0x7fffffff, 0x6ec5, 0x1, 0x5, 0xfffffff8, 0x1, 0x7f, 0x7, 0xff, 0x4, 0x3, 0x9, 0x0, 0x3, 0x2, 0x10001, 0x3, 0x100, 0x80000000, 0x7, 0x8001, 0x748, 0x3f, 0x400, 0x100, 0x6, 0x3, 0x8, 0x1f6a, 0xff, 0x7, 0x5, 0xfe3, 0x8, 0x5, 0x9, 0x9, 0x0, 0x8, 0x100, 0x2, 0x400, 0x1, 0xc720, 0x2, 0x5, 0x1, 0x10000, 0x1, 0x4, 0x80000000, 0x81, 0x6663, 0xfffffffc, 0x7ff, 0x4, 0x80, 0x3, 0x5, 0x7f2, 0x4, 0x7, 0x5, 0x5, 0x400, 0x200, 0x4, 0x2b, 0x5, 0x80000000, 0x7, 0xffffffff, 0x9, 0x5, 0x200, 0x6, 0x2, 0x8, 0x2, 0x1, 0x5, 0x40, 0x2, 0x2, 0xf61e, 0xffffff3a, 0x3f, 0x3, 0x3284e397, 0x3f, 0x1ff, 0xdd, 0xe056, 0x13f, 0x3, 0x7fffffff, 0x7, 0x2], 0xa, [{[0x5], @empty}, {[0x2, 0xfffffffc], @local}, {[0x3ff, 0x2], @multicast2}, {[0x8000, 0x4], @local}, {[0xdbb5, 0x5], @rand_addr=0xfffffffd}, {[0xf476], @multicast2}, {[0xe0e2, 0x1ff], @dev={0xac, 0x14, 0x14, 0x12}}, {[0x7ff, 0x9], @loopback}, {[0x6, 0x9], @remote}, {[0x1, 0x8], @loopback}]}, {[0x6, 0x1, 0x81, 0x200, 0xff, 0x7fff, 0xfff, 0x446, 0xffff, 0x2, 0x2fc4, 0x7fffffff, 0x4, 0x10001, 0x2, 0x40, 0x3, 0x3ff, 0x81, 0x6, 0x6, 0x28f, 0x2, 0x5, 0x81, 0x0, 0x8000000, 0xffffff4c, 0xd8de, 0xfffffffe, 0x2, 0x0, 0x7, 0x5, 0x4, 0x40, 0x3, 0x1, 0xffffffff, 0x9, 0x7, 0x7fffffff, 0x5, 0x9, 0xfffffffb, 0x0, 0xffff0000, 0x0, 0x4, 0xb5a, 0x10001, 0x401, 0x0, 0x7ff, 0x36, 0x3c04, 0x6, 0x200, 0x80, 0x8528, 0x71b057c3, 0x7, 0x9, 0x3, 0x7, 0x3, 0x1000, 0x3f, 0x8, 0x2, 0xffff, 0x7ff, 0x9, 0x95cf, 0x4, 0x1, 0x4161, 0x257158a7, 0x1, 0x4b7f, 0x8, 0x401, 0x400, 0x2, 0x7, 0x7f, 0x6, 0x2, 0x9, 0x1f, 0x2, 0x1, 0x7fffffff, 0x3ff, 0xa29, 0x9, 0x0, 0x0, 0x0, 0x1, 0x5, 0x2, 0x9970, 0x8a8, 0x6, 0x101, 0x0, 0x0, 0x1000, 0x8, 0xb4a7, 0x5382, 0x6d29bdea, 0xf2, 0x1, 0x5, 0xffffffff, 0x3d, 0x5, 0x8, 0x400, 0x1, 0x6, 0x8, 0x10001, 0x80, 0x1, 0x9, 0x2, 0x0, 0x1, 0x0, 0x2, 0x5, 0x6, 0x4, 0x80000000, 0x7, 0x3b9fe88b, 0xfff, 0x3, 0x80000000, 0x7f, 0x100, 0x1ff, 0x9, 0x1000, 0x5, 0x80000001, 0xb4, 0x80, 0x4d8, 0x5, 0x81, 0x9, 0x8, 0x80, 0x6, 0x80000001, 0x3ff, 0x4, 0xfffffff8, 0x6a, 0x200, 0x5, 0x3, 0x10001, 0x4, 0xfffffc69, 0x0, 0x13c4, 0x1010000, 0x3, 0x80000000, 0xb49, 0x9, 0x0, 0x9, 0x5, 0x5, 0x8, 0x4, 0x1, 0x4, 0xfffffffb, 0x8, 0x7fffffff, 0x4, 0xd6, 0x5, 0x9, 0x4a16, 0x3, 0x400, 0x800, 0x6, 0x7, 0xd8, 0x6, 0x200, 0x13d, 0x1, 0x40, 0x4, 0x9, 0x100, 0xa8c4, 0x10001, 0x200, 0x81, 0x8000, 0x11, 0x6, 0x3886, 0x8001, 0x3, 0x3, 0x29a, 0x8, 0x2, 0x7f, 0x7, 0x446, 0x5, 0x10000, 0x8, 0x5, 0x6, 0x5, 0x68b, 0x2, 0x9, 0x5, 0x9, 0xfffffac6, 0x7, 0x9, 0x8, 0x791, 0x8, 0x8, 0xfff, 0x10000, 0x2, 0xfff, 0x40000000, 0xfffffc01, 0x40, 0x6, 0x4, 0x5, 0x10000, 0x4, 0x0, 0x400, 0x2, 0x8], 0xa, [{[0x5, 0x2b2]}, {[0x3, 0x3], @initdev={0xac, 0x1e, 0x1, 0x0}}, {[0x5, 0x7], @dev={0xac, 0x14, 0x14, 0x20}}, {[0x1, 0x9], @remote}, {[0x8, 0x9], @rand_addr=0x5}, {[0x6, 0x5], @broadcast}, {[0x2, 0x4], @local}, {[0x6, 0x3], @loopback}, {[0x8000, 0x7], @local}, {[0x0, 0x7], @multicast2}]}}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffffffff, 'syz0\x00', 0x1}}}], @common=@log={'log\x00', 0x28, {{0x6d, "0ce6e346114a725932fb2124abe9cf5c81d2c592cdbd0e24910693f5dd2b", 0x1}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x1, [{0x5, 0x989117f88cc90647, 0x600, 'caif0\x00', 'gretap0\x00', 'veth1_to_hsr\x00', 'nr0\x00', @random="3b4ed080c930", [0x1fe, 0x101, 0xff, 0x0, 0xff, 0x80], @remote, [0x0, 0xff, 0xff, 0x80, 0xff, 0xff], 0x6e, 0x6e, 0xe6, [], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0xc2, 0x7ff, 0x8, 0x0, 0x0, "f7f14061512a0f19b1b501868afd30f7c9cd39d34e1477840f40b22d499533689c2fbc2efb2eeeb59844e1fbb4f4048470abba64e547890ec7154fe3472aed76"}}}}]}]}, 0x1284) 18:19:20 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000980)=""/246, 0xf6}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='stack\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) write$selinux_attr(r1, &(0x7f0000000040)='system_u:object_r:wireless_device_t:s0\x00', 0x27) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x4e0000, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000100)={0x2, 0xff}) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r3, 0x0, 0x0) sched_getscheduler(r3) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) [ 462.223868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 [ 462.268538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=19093 comm=syz-executor.1 18:19:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff}) r5 = dup(r4) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000480)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f00000004c0)={0x10, 0x3b, 0x13, 0x1e, 0xb, 0x0, 0x1, 0xe6, 0x1}) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00') r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$FUSE_DEV_IOC_CLONE(r8, 0x8004e500, &(0x7f0000000340)=r10) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x2) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4080208}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="210028bd7000fddbdf25040000001000040004000000070000008100000008000300060000000800054f4679c2000500000008000300080000000400040008000200050000000400050000000080000003000000ffffffff090000000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x20010004) read$midi(r5, &(0x7f0000000100)=""/62, 0x3e) 18:19:20 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000640)=0x7, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r5) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000180)=0xe8) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setresgid(r8, 0xffffffffffffffff, 0x0) stat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)='./bus\x00') fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000440)={0x1e0, 0x0, 0x5, [{{0x4, 0x0, 0xf93e, 0xf944, 0x400, 0x2, {0x5, 0x8, 0x9d1, 0xd2c, 0x3f, 0x5, 0x7f, 0x7fff, 0x11f, 0x3ff, 0x8, r6, r8, 0x4, 0x6}}, {0x6, 0x1ff, 0x0, 0xcbf}}, {{0x2, 0x1, 0x2, 0x5, 0xffffff32, 0x1, {0x4, 0x7b, 0x4, 0x5, 0x61, 0x6, 0x3, 0x80000000, 0x8, 0xb0f, 0x200, r9, r10, 0x2, 0x9}}, {0x5, 0x1f, 0x6, 0x5, 'cpuset'}}, {{0x4, 0x1, 0x8, 0x7, 0x4, 0x1, {0x5, 0x200, 0x881, 0x9, 0x1, 0x80000001, 0x13, 0x3f, 0x10001, 0x3f, 0xff, r11, r12, 0x3, 0x200}}, {0x4, 0x0, 0x0, 0x1}}]}, 0x1e0) r13 = open(&(0x7f0000002000)='./bus\x00', 0x171042, 0x0) pwritev(r13, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x1, 0x0) fallocate(r13, 0x20, 0x0, 0xfffffeff000) r14 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r14, 0x0, 0x0, 0x10000101) r15 = socket$inet6(0xa, 0x3, 0x4) close(r15) r16 = open(&(0x7f0000000140)='./bus\x00', 0x149042, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000700)='/dev/vsock\x00', 0x2284, 0x0) sendfile(r15, r16, 0x0, 0x80001d00c0d0) creat(&(0x7f0000000000)='./bus\x00', 0x0) [ 464.190691] device bridge_slave_1 left promiscuous mode [ 464.196314] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.254542] device bridge_slave_0 left promiscuous mode [ 464.260633] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.311803] device bridge_slave_1 left promiscuous mode [ 464.317540] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.361072] device bridge_slave_0 left promiscuous mode [ 464.366722] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.512919] device hsr_slave_1 left promiscuous mode [ 464.553619] device hsr_slave_0 left promiscuous mode [ 464.604762] team0 (unregistering): Port device team_slave_1 removed [ 464.616083] team0 (unregistering): Port device team_slave_0 removed [ 464.626191] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 464.694218] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 464.763893] bond0 (unregistering): Released all slaves [ 464.873796] device hsr_slave_1 left promiscuous mode [ 464.914375] device hsr_slave_0 left promiscuous mode [ 464.974130] team0 (unregistering): Port device team_slave_1 removed [ 464.985192] team0 (unregistering): Port device team_slave_0 removed [ 464.995754] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 465.043750] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 465.111870] bond0 (unregistering): Released all slaves [ 467.551162] IPVS: ftp: loaded support on port[0] = 21 [ 468.393827] chnl_net:caif_netlink_parms(): no params data found [ 468.428870] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.435839] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.443283] device bridge_slave_0 entered promiscuous mode [ 468.450926] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.457943] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.466055] IPVS: ftp: loaded support on port[0] = 21 [ 468.472609] device bridge_slave_1 entered promiscuous mode [ 468.495714] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 468.505208] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 468.523777] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 468.531590] team0: Port device team_slave_0 added [ 468.537794] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 468.545636] team0: Port device team_slave_1 added [ 468.551381] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 468.559151] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 468.622420] device hsr_slave_0 entered promiscuous mode [ 468.700404] device hsr_slave_1 entered promiscuous mode [ 468.763067] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 468.775255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 468.809996] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.817121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.824341] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.833204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.906271] chnl_net:caif_netlink_parms(): no params data found [ 468.954835] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.962319] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.969765] device bridge_slave_0 entered promiscuous mode [ 468.977446] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.984246] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.991408] device bridge_slave_1 entered promiscuous mode [ 469.012894] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 469.024036] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 469.045223] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 469.053268] team0: Port device team_slave_0 added [ 469.059285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 469.066726] team0: Port device team_slave_1 added [ 469.073819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 469.082455] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 469.088886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.098924] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 469.105910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 469.122983] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 469.129625] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.142014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.149592] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.157450] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.223715] device hsr_slave_0 entered promiscuous mode [ 469.280513] device hsr_slave_1 entered promiscuous mode [ 469.322668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 469.332890] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 469.340646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.348578] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.355094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.378836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.389142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.400662] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 469.407114] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 469.414769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.423072] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.429406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.437272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.445435] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.453213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.460877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.468350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.475751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.487424] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 469.499298] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 469.508706] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 469.515346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.522648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.536455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.577964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.592323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 469.601522] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 469.609284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.617268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.626092] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 469.633142] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.642193] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 469.649535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.657880] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.666524] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.672940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.689962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.701255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 469.716252] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.724645] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.732506] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.739356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.748708] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 469.756490] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.768756] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 469.776291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.786929] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 469.795101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.804581] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.819609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.835980] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 469.868295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.886774] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.900137] protocol 88fb is buggy, dev hsr_slave_0 [ 469.905788] protocol 88fb is buggy, dev hsr_slave_1 [ 469.910153] protocol 88fb is buggy, dev hsr_slave_0 [ 469.917868] protocol 88fb is buggy, dev hsr_slave_1 [ 469.973553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 469.985271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.000106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.029632] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 470.041688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.053940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.087556] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 470.095028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.108902] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 470.117792] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 470.124618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.132242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.144656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.210173] protocol 88fb is buggy, dev hsr_slave_0 [ 470.215852] protocol 88fb is buggy, dev hsr_slave_1 [ 470.310391] protocol 88fb is buggy, dev hsr_slave_0 [ 470.315950] protocol 88fb is buggy, dev hsr_slave_1 [ 470.340238] protocol 88fb is buggy, dev hsr_slave_0 [ 470.345769] protocol 88fb is buggy, dev hsr_slave_1 18:19:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:28 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000100), 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:28 executing program 5: syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000b009004030000686ec97824", 0x12, 0x400}], 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x18880, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 18:19:28 executing program 1: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000340)=r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000000c0)={r9}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000280)={r9, 0xcd, "cedc900f06036bc3caf06ced1094db5c5cd0549fd87cd23fb2f65ffe504319efb3088e712914ea5a72107ad0daa2f0a84a931d746e786ee55770bcb75f2d092ab2d3d821ad32e8f922ae4b72ee8cbc50544e85a477031177b65be2c5953de8d32fd8736c70bc83378db34f93b377e632f4213e2047cd93d3d38c77be500300adb64598ced31df3da09f52569c583f6fe23b2240d11c02b284392e7a669c69ee2c83658c9c3b0adeb55ec128719cae7390d681f7e138d440ce27c5e278223dfbf6df4515ee524d0938f0a985e4e"}, &(0x7f0000000140)=0xd5) vmsplice(r1, &(0x7f0000000ac0)=[{&(0x7f00000000c0)="b20dec493c823c998d6265e4f7d3b5f4c220c70477f57c4a88e775f332ffadf1d46cbb134816a3008ac626ba6157f7b7d5428f7cf91be174f7b96f49d0ab798f57c485ddf26808e64218fe5eb30325be00cdb2d7d7b639bcc98c5396b3a2", 0x5e}, {&(0x7f0000001440)="c43ba8265e57053444fecccb72efc53ca1d44e85fb64730b14a5a5906e3aea81d5456d1719f780d07dc45318740b07f20830707b285a64389a9c5574b0f28ab08cc5d55f3c20c6dd31c0faed2b9494c2ad26b5c0b2008b69dece295d4ec606070ea098aa196f6eac7062774f635fe16f0a3770709585ab6e69d5e7dfbdc3086c398c499f399b87091c92787e246a03020698441c5b611e5dfea4b0601c74e7438442baa6f621f9c825fdedfdb1f5fcc38ae8eea86da0cf641fb9a76c71929ad2f060966f3685fb644613a0f40ca83a385b3cb6e49db5f70705b1ec58631948e6be51687542fa551369f7f2c207abab001078d6dedaf6e9b1f0c1174e09ffd1d2741c125ed4979fda52076c3f7d31ed778c92cf72fc3d9a9b3bcd1340a349f0642c839b23f26fed758fe14ea205bf8b5e9f5d84aa1a3a470e04bc0165829e0ce62c3d549d2ec7531be7dfa1d1a67fa06d0172fd5543b142c83fe524a4b04cf07db96bc468d4b88edfb356c28cdd35d60fcc84f7e3e36166a64b538c324e0d8cb64983e19d85252e23de465f70367a23440661c652e3905de168bc070d8c83dba6079e7629f0d0fe6eba4262767868ae0d93845f3fb9756efbc29aa730580fcf5d5ef273850fcf65ad3fbf895312793ffd32c9d8fc51b690356892a18fc08962497797821c2f5b78ad6d88e3119abe9e1e5071361a30fed44f5dfc28f27e655eb9ed5ab5581a74844c17d4b8ea03fdc1f199789408db1f1f864f46396bec6e065a339fdbe516f0c860c1f52f6a385a1e33f4a97db7056666a7e5d9b2f91b941750e47d4fedb3007d5f0c6370048a409fda9804150bd6eb90df6e5c93444cae1765a8a9985cac49e686c70cb197937588915108f0bfcd48c3a38458e630c6c8b7ab54399b11da6431e36b9f6b013d56ff95e7baff09f7e95ec9c034bb0f63c12ab00adcc10373a96d8fa163aa33a1204588cdbc5e292a7c3adc3de4a0b13d7f70bcad2b2e79ae2821df5e3ae90a8f397fda94cf63080bba3dcf83269e46171be679897b691198d8c0adc8e111c5fac48c69e1bcb4dd7e4db977511de8ff85820123600a172d3c2ac7f94d4af9dae77b29e8a1db0222f9ead8a405be412a7d9dd0b15130e7cb8ed7836699f03b451426a66197e984789b0ef8cd12ae4e93838141dd845d1fbfb15a7acf9fd79cb9a5c69527c8ba5b2ae49cb26e2124b279035c1213f6aa63e9a275c6e3e6da9b10763926a3f8771c949947e42154da4d54e084dab515ed2be32ebabd5384d2faecf052265608d9e4b54b227336a06c05ee9f4a3c2cd23c572ed14a0445a96205628f042e2b22073104b5b572ad74c6085a7f919dfff3922533e1b85bed33ff717ee6138e3c40a40f12da14ce6d32ea6c38181bf0c85e756ce82e3ade1c16e297d5c03b60ecda50cd4ca1f5b92869cfee9e49d56b930757e6a5ae7cbc73b9b4946168338f95a7c04ad1a2aa268993f47a51eab6d887da156112f15f9817638e1254a3bd9a037b2a2c38811e0cecf93b80fbcf766f1ef91906b3d413bb6555f6bfe951229f914ebb784fbd86aad7ccc7c91a1f038082827d13769f68e9c942da0fb677c54eac8b8bb33e08c2fc162a2045877e7d945943d35d338561a7a617834485afffb7cf5e92a430499561a22d36cc168107a20ad358c697b6c9827f9a10718f2e3e24d531e7472e19622a72a23ca75211a669d7d5bb64de4d9b3c3aba255e9cd00723ef07e452f27ba55ce0461a2f37469dbfe376dcb5ea770cf83a0d9eebaa8f18b1d7825d7f64d28d039e50d2f2fb97eaeb6ac99c5340f60f845b8c130390be8f5e384f66801021e959f9575a65d1e0d9f03cc1d63af8fac48984c47dff0a8a69916d573e1d6dcc2f2e1b3e02d42a6f8936247ee43bc41141cbd4ce0b007abf5be050daadf785018d8a0d833df6446b5345009c66e9b479847ff722c5a2b19648ec215d84a00c61770cee8884048c534877a0dc725641158c299606656659ad24de2b43c74cf8417e2fb9546616c806f0dd3c2c7d51568bc465017ac9ef71dd162f6bc52f83ab346937a3a44c8a75ec41511b7f94d0eaa4e046104c3e4c1d8c374a614ff250fd2532bd9014077a3e20abbd38dc33c881ad39f9e0b240061f8a6df4c7bd5a91010cea4398a7128c8bf4cc448314da8b51aed6d3ac01563481ffc5160e72fba008f668bcf922946e82215b8e52cb759962c97cd78cf8c8d84ce56f1630e1d0e9140dc932bc6f30b617267b32efe3c3264ba7ab4b45fdd6d89565cf7611754c31ddbacb6a35a4bda94a502aefe7a8c052a601bd0144c1179f5e78fae9ecc1e6378c5e9f0e13ec9d168c686fd0c737bf97916bf98e707c9ad8a749ee4cf3ca09abd85f217923d1876135d01d43d8444a7b210cfce384af134f67eba5822bf8a4cd0edc359b31c844e40f755d99b1e9d9a622131d327a7db302023a3aeedda633d3d9ada0f6703192c5ca9a20918d35ac26d65fcdd8d413598c293ed87a1bca816311160fdc26167f5788272d77c82084f248ca8e6adda918a2bac919a1766a5c08a5b4d84975e8a8a84628699cecc9d6d9eea432a2761e80303f8a454a96371d671508255d1da628001fe9a4538c0c97ba612005033f5a5bda4530d753b54c6328f8d8ab4a9c17efd16f80513940adc98d27ec3e27f749a74d67d9af633f4e29d1748f5ab7589e27e97f376837aac3fbdf3250e824d291eca7a1f5f9dc2705542c64c19a14cd7251c548318013cad705cebc1a2bf6472ed2022191b06d1d853ccf7cae960a66c2a658babb30a61f91e15847935c2dbef66bf57a57617ff73689e5079a200cbbfe8140564bb2dacb4ffd74e866d636fdd597ec73ef794bd45582a567548e862c3a2922931a1b15a6991cd7efd67c1057f006f0349f56983df7a32f26b101310e2a348d8efc1b35200a3b46ac85fbe996b335c5347e72caecde1ad4ff2061c2b77e99bf51ea477e27c9ff9e144e01060f5ead478b8cde6c10e79e99c74b639eaa51e6e6cf11745a678fd8b5d6cfab584bf24c71d034965fac3b4ed28390a938498bb8296fc368012fb4e88c9bf167e7b0217773ceef4d98197bad0fecfb83a494034704ce1d28e8c0eb2ca0d40f0de011a34ae72b17a891891709e2888884619a04d71c524c819816ded8e2d13aafdbcc7e6104d0b5a41d6705c96eb7e7a26f1a5b0df75dea2728b6b6cd1b510029908856d6298a4597a5a4d4fbd5d30adff9088436cdbc9032518f1fd0a3b264381336408a910d399d470d4b672bb42471add99bd4156691380882169dc64344e47bafc22c36c8c9ebf8dc53dd15f44d7c6b1a2879ff60540f00009904f033ccf936d6110ac3fd2a646348a82d11b5232b281d8eb6366fb804a68c95dae76355b64148c2f3a1b0e9b2eac5c3987e69af182141f49b929a39d1832982153c76b6332057c9bcf7b3b40efe384c1bfd94c14e858ed821965d7242daa5b0360e2ff2fec2feefde8d34a570dd35231325787f59a9f70174ba677c51e93f52a430cfc7af7caa42523ff501afc0e73faf4c722cf1087af367e13c38ed4fe162e4fcbfa00b74010602afed57c64e2e0ae331ddec14f603da1b1e5b0b59627daaa2b8efff012728da86575f6dfe50d7cbee4c52496e9fd5dc98454d3ddfbcd9efa3aebe10512fa444914f6cc7102f3e0cfca56063509f7a310383827aa3b648d9c8c67bcb847941b214edefdaa0e455823e6c45c253267100339edd193f0afc65801ce731338218237fead5c651419e30c401986586c46b7c50829dcc1ed3f5010a45046599aed576bad0100d04be614356155dd879ea9ef0880ee1fb3236c838eb2f4c96c75ee43c20ac233bdf53c24449fd5a9391a914e4d6ae9fa900d76d0dd8eaf424d8a59c437345eefedcfd258d2428c078fff808626bc1035e03df74cfcc4b3dd913a229f16735d08ad107ca8e71d1f742449f78490bd0cc153f86395aaab741eacc26994ec24636049ce279868d2b4074609b2c00f7d9a3e006142eafaebf8601243a1d36e168faf15b46c1a35d5b9560806c8bb13bef3994f0c6e60c274ea589f4d9f5515a8dc81920488a44ae9cd05bc58cfd787fd17e222b30042626f1d17dd58a66fb9141d77b604d556490354159de0c1ded39e57b0dced3583cf608457de1368798b2184b89c5fa27d316fe9280d0b4d74e761a25200d045766348ae2570e4ffba9b38638455e7bdff649a05377bfe4ec9a728f6527e26be89c2bad5210d5d96b088687975194c59b068b429a0d46199938d60e7ec08105803bca9adff49857c2c45a1f76115c3c2b90cc610c8b5ea27a4b88c5a8126476b7009ca1c4f504438f56d640763cf374aa4d7f23379a94c4280d0829c387eddc341eb75cf3eff00bdd7e3feddb53a0ed54defc20eb780a9e2e84171ea1e8403ca9a69f1cfba1d582728e60284600e21fd1c93e053ab97ff7b41170b699217c9ef32dfc9d9bd282ed6784d0de3e7c7203fbf272783a3f1caa67ff40df7eb737393df9124f4693898350af3da6ad8b3d0ddf55e1576b961c5b678a1c3593ef3f0ed4ef9992ca16f91266eb3c66f4c505638795d3794c357d804f2f47919f78505be15f1230d186f9d8086c844856b669809bad9dc413d9d54055bb8a2453b6258ac6a64b8fa733bc1b8f5308e71b837ee349d650287358de36474bd33b1aa847257416c018f7d3e943de9bf8ab01886527bb01fdf735559e1928660575e976146082823774480f4031079c53f7289f851269584778d5f3e8f86e493f424bde3215bc202939f9ff1a339096bae8a872ef0bca1a78965f40414dcb7e5f2d3e86871c797b817ff007e019467657a6bb3504f62480593c12fc6dafed5e5d74be4491a1b3aab2f9795e7a39e148683bd0dafef9dc9a55a7b0c6ff14348c9e763a9e52231a07a386e15f6f12adc218e44fb338ca52828b6aed8fa3f78ae6bdba8820f50989ad87a4f721bfe37ce1701f0cffc5a5bf7195548ab09216c54152ff552489c2bd92b5e342f50f5cd908d4d6ad19b14d5ddda5de0f78e8936a066e2d072988d54a7e60327f81a7dae0fbd10b807824261bbeb7138fb7b7d6dd512b5dd3e3f34ec3e7af4f070a2e0a21aeed9cc77e3caf660dc5d1818e29da69deaad1b8aaa5054e33f3266c6e4aaabdc868b654a81b5ea5898136c558a2957f185b63fa0de9a70b67bc3c8c6483d0a4a1bed56931fb3169f99fb81a84cb08274fa01b2ea8123814dcdd4c2c02084b2d2d4c38c75f31e57fafca9e7283fda9bef96609231116a7a07cb75049854872a295b4e5771dbd23ec580cde40605724231d78b106cb512bf84e20273c707c0a7b5ac5fc37fa23f1fcfc25c1e413cc26e2bcc0efd74439029fd1c1dbe71333e3c602e7ff8b923269179ee921795e5176e7f53d67c5ec28853df7706ff4098a4f7fa76c63f20d8d0f6b1df8ad68fc02f60a278c7083d0d405862eef8999898fbf42619981133c648ffc61abc229dc4b84c6acd24153ed080356b29d6d053daab92d71c5c655378deedc9e5c667e4ba591f59004835e9ccd8f7565a17909af9b813177c45ceb6034a5a9095ef1922b7dab", 0xf77}, {&(0x7f0000002540)="fe", 0x1}], 0x3, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 18:19:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xfe3b, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000092c45a0e615f0ff33f4255fdd600000507", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008001200ffffffff"], 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) 18:19:30 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r5}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x3ff, 0x6, 0x20c, 0x80000000, 0x9, 0x2, 0x4800000, 0x2, r5}, 0x20) write$cgroup_pid(r1, &(0x7f0000000000), 0xfffffea6) 18:19:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0}, &(0x7f0000000280)=0x5) setuid(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e23, 0x3a, @local, 0x80000001}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x16}, 0x4000000}, 0x0, [0x6, 0xff, 0x0, 0xfffffffb, 0x80000001, 0x1, 0x6, 0x9]}, 0x5c) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) execve(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) [ 471.783989] team0 (unregistering): Port device team_slave_1 removed [ 471.795811] team0 (unregistering): Port device team_slave_0 removed [ 471.806861] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 471.856830] bond0 (unregistering): Releasing backup interface bond_slave_0 18:19:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) sched_setattr(0x0, 0x0, 0xe04394f8338058ff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000040)={{}, 'syz1\x00'}) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) socket(0xa, 0x2, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x4, 0x11, 0x0, {0x6, 0x2, 0xae2, 0x3, 0x2362fc9d, 0xbef, 0x9, 0x35c7, 0x1, 0x1c2a, 0x1, 0x0, 0x0, 0x0, 0x7}}}, 0x78) getgid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x400000, 0x0) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r4 = syz_open_dev$usbfs(0x0, 0x77, 0x0) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x7ff) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0}) 18:19:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:30 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f00000000c0)={r7}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000100)={r7, 0x3103, 0xfd69}, &(0x7f0000000180)=0x8) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:30 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={r3, 0xd1, "15f29b87afacb5dddcd5079e792a1c44cd36c0ad5229f413c6af8879299182cbb5a1238d2da0691523b9446fedaa0054ada345fb265418a1314957b5c44d92e9b964f6509f4355d2df3aa3cd19430e95b65b96fe6f51033088c822c93ca0e6ebb80cc118689866e50f519aaacdae8184618f043299463165d2a13189a7daee7dde33674a7b09918816514b8da9bea532b4901602d7cb3d2b90454a79ab20273b4379ea319e896e9bee9f85754f449e6c4d4bd3b09400d65870bfc9bfa47ff046a184a1e7dbb8be59f812b4303be7681ae2"}, &(0x7f0000000100)=0xd9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="0000003def2bea020040dc", 0xb}], 0x2, 0x0) [ 472.633365] BFS-fs: bfs_fill_super(): No BFS filesystem on loop5 (magic=00000000) [ 474.581415] IPVS: ftp: loaded support on port[0] = 21 [ 475.536614] chnl_net:caif_netlink_parms(): no params data found [ 475.649974] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.668451] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.676081] device bridge_slave_0 entered promiscuous mode [ 475.695262] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.710153] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.728432] device bridge_slave_1 entered promiscuous mode [ 475.777806] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 475.819210] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 475.870660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 475.877999] team0: Port device team_slave_0 added [ 475.897308] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 475.920736] team0: Port device team_slave_1 added [ 475.934815] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 475.943278] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 476.017544] device hsr_slave_0 entered promiscuous mode [ 476.060413] device hsr_slave_1 entered promiscuous mode [ 476.100902] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 476.108424] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 476.128476] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.135061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.141766] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.148245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.160839] device bridge_slave_1 left promiscuous mode [ 476.166472] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.224985] device bridge_slave_0 left promiscuous mode [ 476.231954] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.352933] device hsr_slave_1 left promiscuous mode [ 476.393156] device hsr_slave_0 left promiscuous mode [ 476.444235] team0 (unregistering): Port device team_slave_1 removed [ 476.456035] team0 (unregistering): Port device team_slave_0 removed [ 476.466418] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 476.505596] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 476.574502] bond0 (unregistering): Released all slaves [ 476.641646] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.648656] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.670897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.679171] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 476.687712] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 476.694784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 476.703368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 476.713050] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 476.719713] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.729179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 476.736472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 476.744450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 476.752463] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.759062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.772101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 476.779347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 476.788365] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 476.796409] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.803454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.812949] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 476.820856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 476.875084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 476.882661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 476.897599] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 476.904875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 476.916929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 476.927216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 476.939482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 476.947353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 476.959251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 476.969261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 476.977327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 476.985770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 476.996155] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 477.007394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 477.015471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 477.028631] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 477.034983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 477.050108] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 477.058343] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 477.065120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 477.073291] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 477.084361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.486186] IPVS: ftp: loaded support on port[0] = 21 [ 478.630475] net_ratelimit: 6 callbacks suppressed [ 478.630481] protocol 88fb is buggy, dev hsr_slave_0 [ 478.641084] protocol 88fb is buggy, dev hsr_slave_1 [ 478.870521] protocol 88fb is buggy, dev hsr_slave_0 [ 478.876000] protocol 88fb is buggy, dev hsr_slave_1 18:19:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001100)={0x0, 0x2}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000001180)={r4, 0x4}, 0xc) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000000000)="290000002100190000003fffffffda060200000000e80001040000040d000300ea1100000005000047", 0x29}], 0x1) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/net/pfkey\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000010c0)={0x0, 0x5}, 0x8) 18:19:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x40, 0x0) write$char_usb(r1, &(0x7f0000000180)="e03731b6485d6b3b81508ed9dc416185d6387259ff931dbede6860bc797128771e6cbef4db61ca7af6f7a865dc491bd584963d94dd8b363c628f774547993611c8e34d8889ce6b593540fab5049e32139ab13e4b4b534dc07d760e3c49b6db0e6c175e66727fdbd98d4c813cb636ae3329ec78903fb0fe7bd44ec8bea54a97dfe802eb657eefad3b168f1a483f8d13dc188574e9ff1afc6e94b34fe700bed1be7143d6af95284bae36ebc6e9f4b010588fe729", 0xb3) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:37 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) inotify_add_watch(r0, &(0x7f00000003c0)='./bus\x00', 0x6a1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x1, 0x72eb5c4e, 0x4}) fcntl$setstatus(r0, 0x4, 0x3fffe) io_setup(0x2, &(0x7f00000004c0)) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d0b, &(0x7f0000000080)=0x8) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000340)=r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$FUSE_DEV_IOC_CLONE(r11, 0x8004e500, &(0x7f0000000340)=r13) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r16) r17 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r19 = dup(r18) ioctl$FUSE_DEV_IOC_CLONE(r17, 0x8004e500, &(0x7f0000000340)=r19) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000980)=ANY=[@ANYRESOCT=r12, @ANYRESHEX=r10, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0]], 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = dup(r20) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r21) r22 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r24 = dup(r23) ioctl$FUSE_DEV_IOC_CLONE(r22, 0x8004e500, &(0x7f0000000340)=r24) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r21, 0xc00c642d, &(0x7f00000002c0)={0x0, 0x100000, r24}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000380)={0x0, r25, 0x3}) r26 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r27 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101081, 0x0) ioctl$KVM_GET_DEBUGREGS(r27, 0x8080aea1, &(0x7f0000000100)) r28 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = dup(r29) ioctl$FUSE_DEV_IOC_CLONE(r28, 0x8004e500, &(0x7f0000000340)=r30) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r30, 0x800443d2, &(0x7f0000000480)={0x4, &(0x7f0000000400)=[{}, {}, {}, {}]}) write$P9_RXATTRCREATE(r26, &(0x7f0000000180)={0x108}, 0xffffff02) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) 18:19:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:37 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6, 0x1ff}, &(0x7f0000000040)=0x8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r7, r0) 18:19:37 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000340)=r7) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f00000001c0)=0x3, &(0x7f0000000200)=0x1) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 479.783115] chnl_net:caif_netlink_parms(): no params data found [ 479.865501] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.875033] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.892176] device bridge_slave_0 entered promiscuous mode [ 479.905037] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.914236] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.926036] device bridge_slave_1 entered promiscuous mode [ 479.967809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 479.978961] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 480.025251] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 480.033158] team0: Port device team_slave_0 added [ 480.039260] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 480.047021] team0: Port device team_slave_1 added [ 480.052842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 480.061396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 480.123217] device hsr_slave_0 entered promiscuous mode [ 480.150701] device hsr_slave_1 entered promiscuous mode [ 480.196354] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 480.204111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 480.219626] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.226412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.233238] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.239916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.275828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.286500] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 480.299292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.308105] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.315838] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.326651] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 480.333449] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.346115] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.354361] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.361052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.371606] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.379635] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.387459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.404676] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.413312] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.423890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.431579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.440316] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.450635] device bridge_slave_1 left promiscuous mode [ 480.456182] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.511419] device bridge_slave_0 left promiscuous mode [ 480.517232] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.654766] device hsr_slave_1 left promiscuous mode [ 480.694329] device hsr_slave_0 left promiscuous mode [ 480.735340] team0 (unregistering): Port device team_slave_1 removed [ 480.746189] team0 (unregistering): Port device team_slave_0 removed [ 480.758223] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 480.785023] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.875414] bond0 (unregistering): Released all slaves [ 480.915353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 480.923133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 480.931275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 480.945106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 480.953211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 480.961504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 480.973325] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 480.979673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 480.994701] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 481.002906] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.009549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 481.017282] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 481.032536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.310127] protocol 88fb is buggy, dev hsr_slave_0 [ 481.315239] protocol 88fb is buggy, dev hsr_slave_1 [ 481.430312] protocol 88fb is buggy, dev hsr_slave_0 [ 481.435794] protocol 88fb is buggy, dev hsr_slave_1 [ 481.920174] protocol 88fb is buggy, dev hsr_slave_0 [ 481.925463] protocol 88fb is buggy, dev hsr_slave_1 18:19:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000180)={0xb, @pix_mp={0xc3, 0x6, 0xa0363159, 0x7, 0x8, [{0x3, 0x3}, {0x1722, 0x80000000}, {0x4f, 0x8}, {0xa0, 0xe}, {0x4, 0x6}, {0x10000, 0x9}, {0x0, 0x2c}, {0x73, 0x7}], 0x7, 0x3, 0xc, 0x1, 0x6}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="ffffffffffffffde280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000000000a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x201, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 18:19:40 executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @empty}, 0x1c) openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() openat$vcs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) dup(0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000000)='/de\x01\x80\x00\x00s/usb/00#/00\x02\x00', 0x7, 0x30d0bd02bfd4c47) read$usbmon(0xffffffffffffffff, &(0x7f00000001c0)=""/176, 0xb0) [ 482.136421] device veth3 entered promiscuous mode [ 482.148750] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 482.166142] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:19:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000100)={0x400, 0x200, 0x7, 0x3, 0x200, 0xcd3b}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 482.296931] device veth3 entered promiscuous mode [ 482.339147] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 482.372066] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 18:19:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:40 executing program 5: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = dup(0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000010000/0x18000)=nil, 0x0, 0x420da68f5d13958b, 0x0, 0x0, 0xfffffffffffffe3a) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, 0x0, &(0x7f00000001c0)) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x804000, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/bsg\x00', 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000340), &(0x7f0000000380)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) 18:19:40 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x81, 0x200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'nlmon0\x00', {0x3ff}, 0xfff}) open(&(0x7f0000000040)='./file0\x00', 0x100, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) [ 483.400463] device bridge_slave_1 left promiscuous mode [ 483.406428] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.460906] device bridge_slave_0 left promiscuous mode [ 483.470577] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.594836] device hsr_slave_1 left promiscuous mode [ 483.644472] device hsr_slave_0 left promiscuous mode [ 483.684112] team0 (unregistering): Port device team_slave_1 removed [ 483.694595] team0 (unregistering): Port device team_slave_0 removed [ 483.704367] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 483.734815] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 483.822821] bond0 (unregistering): Released all slaves [ 485.691649] IPVS: ftp: loaded support on port[0] = 21 [ 486.433644] IPVS: ftp: loaded support on port[0] = 21 [ 486.506795] chnl_net:caif_netlink_parms(): no params data found [ 486.553665] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.560456] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.568227] device bridge_slave_0 entered promiscuous mode [ 486.575603] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.582084] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.589345] device bridge_slave_1 entered promiscuous mode [ 486.608807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 486.618650] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 486.647027] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 486.654883] team0: Port device team_slave_0 added [ 486.661210] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 486.668345] team0: Port device team_slave_1 added [ 486.685951] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 486.694455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 486.772652] device hsr_slave_0 entered promiscuous mode [ 486.820669] device hsr_slave_1 entered promiscuous mode [ 486.871151] chnl_net:caif_netlink_parms(): no params data found [ 486.880936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 486.891870] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 486.931859] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.938518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.945892] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.952302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.965369] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.972652] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.981652] device bridge_slave_0 entered promiscuous mode [ 486.990591] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.997236] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.005120] device bridge_slave_1 entered promiscuous mode [ 487.028024] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 487.039886] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 487.062710] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 487.069882] team0: Port device team_slave_0 added [ 487.076778] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 487.084510] team0: Port device team_slave_1 added [ 487.091157] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 487.102917] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 487.162544] device hsr_slave_0 entered promiscuous mode [ 487.220499] device hsr_slave_1 entered promiscuous mode [ 487.261553] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 487.269560] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 487.294211] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 487.301084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.308491] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.315235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.322236] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.328848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.340857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 487.353093] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.361585] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.368721] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.376598] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.385397] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.402540] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 487.409131] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.423416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.431960] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.438860] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.455223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.463673] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.470430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.489272] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 487.499632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 487.510871] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 487.518107] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 487.526849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.535318] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.543942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.552363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.560808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.567916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.587201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.597570] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 487.606297] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 487.618461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 487.625940] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 487.635940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 487.643557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 487.651576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.658864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.668221] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 487.674924] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.685146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.696077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 487.703620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 487.712577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 487.720762] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.727540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.737648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 487.746898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 487.755605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 487.763335] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.769670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.779208] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 487.788543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 487.804234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 487.812954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 487.823223] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 487.832858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 487.841113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 487.849297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 487.858555] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 487.865789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 487.873886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 487.885344] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 487.892863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 487.900890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 487.915355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 487.923311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 487.932031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 487.943417] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 487.949530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 487.968579] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 487.979952] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 487.986743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 487.994345] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 488.005698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.150596] protocol 88fb is buggy, dev hsr_slave_0 [ 488.155977] protocol 88fb is buggy, dev hsr_slave_1 [ 488.190123] protocol 88fb is buggy, dev hsr_slave_0 [ 488.195879] protocol 88fb is buggy, dev hsr_slave_1 [ 488.320681] protocol 88fb is buggy, dev hsr_slave_0 [ 488.325822] protocol 88fb is buggy, dev hsr_slave_1 [ 488.450174] protocol 88fb is buggy, dev hsr_slave_0 [ 488.455305] protocol 88fb is buggy, dev hsr_slave_1 [ 488.630260] protocol 88fb is buggy, dev hsr_slave_0 [ 488.635793] protocol 88fb is buggy, dev hsr_slave_1 18:19:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:47 executing program 5: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000001280)='/dev/loop#\x00', 0x0, 0x7f) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x7, 0x4040) ioctl$KDDISABIO(r1, 0x4b37) r2 = memfd_create(&(0x7f00000011c0)='/proc/self/net/pfkey\x00', 0x0) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000080)=""/11) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) fchmod(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bridge\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000640)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) 18:19:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) r4 = openat$cgroup_ro(r3, &(0x7f0000000180)='cpuAckn.usag\x01_sys\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x37e7, 0x401}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000340)=r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000000c0)={r10}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000080)={r10, 0x0, 0x7}, 0x8) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xae15, 0xd8a}) write$cgroup_pid(r4, &(0x7f0000000000), 0xfffffea6) 18:19:47 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:47 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000100)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:47 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x0, @local}, 0xf) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000580)={0x0, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {{0x2, 0x0, @local}}}, 0x108) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000400)) r2 = socket$rds(0x15, 0x5, 0x0) signalfd(r2, &(0x7f0000000140)={0x4}, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f00000000c0)=0x3) write(r4, &(0x7f0000000340), 0x41395527) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r5, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000340)=r8) getsockopt$inet_sctp_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000002c0)=0x8) fcntl$lock(r5, 0x7, &(0x7f0000000240)={0x1, 0x2, 0x0, 0xffffffff}) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000440), 0x15}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r9) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c907d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 490.041017] device bridge_slave_1 left promiscuous mode [ 490.048064] bridge0: port 2(bridge_slave_1) entered disabled state 18:19:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000100), 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:48 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000180)={0x9, 0x1f, 0x5, {r3, r4+30000000}, 0x7fffffff, 0x81}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xfffffea6) 18:19:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:48 executing program 1: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xfffffffffffffe1e, 0x1, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = syz_open_procfs(r4, &(0x7f0000000940)='net/sockstat6\x00\xcf\xb7Pg\xdb\x88j\x17\xad\x9f\xd9#\x01\xddWs\xfdF#]\xf9\x97\xad\xa6%./B\xb3E\x05V\x97\xebZQ_\xc4\x06]N\x11\xbeyu_\xc4\xedx]V\"\x06\xcd\x8f\xca\xbb \xc7o1\t5dl\xb0\xcaE\xb8\xceS;\\\xe2Lt\x9e\",\xdc\xbe$\x1e3:I_\v\x8d\xdas\x9e\x1bA\tC\xc5\xdf\xdb\xb8\xf2\x84\xf9$t\xf8}HX\x8b=7\x18\xce') sendfile(r5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8) write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x180000000}, 0x268d, 0x0, 0x0, 0x9, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000640)='[\b)\xb4\"\x16p#\x00', 0x0, 0x2) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r7 = socket(0x12, 0x1a6273f2b2e289f7, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000d52ff0), 0x0) close(r7) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000d52ff0), 0x0) close(0xffffffffffffffff) r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r8, 0x7ffffc, 0x0) ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8) r9 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000800, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xe0f}, r9, 0xf7ffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$setregs(0xd, r9, 0x0, &(0x7f0000000080)) write$binfmt_elf64(r8, &(0x7f0000000140)=ANY=[], 0xfffffffffffffe28) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) accept$inet(r8, &(0x7f0000000600)={0x2, 0x0, @empty}, &(0x7f0000000700)=0x10) open(&(0x7f0000000780)='./file0\x00', 0x0, 0x80) r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000140)=0x8) r11 = creat(&(0x7f0000000180)='./file0\x00', 0x80) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f00000005c0)=0x1dc) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x0) r12 = socket$unix(0x1, 0x5, 0x0) dup2(r12, 0xffffffffffffffff) r13 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r13, 0x7ffffc, 0x0) write$binfmt_elf64(r13, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r13, 0x40505412, &(0x7f0000000080)={0x3, 0x2}) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000880)=0xe8) stat(&(0x7f0000000680)='\x00', &(0x7f00000002c0)) [ 490.094334] device bridge_slave_0 left promiscuous mode [ 490.101942] bridge0: port 1(bridge_slave_0) entered disabled state 18:19:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x3}}, 0xa) write$P9_RXATTRWALK(r1, &(0x7f0000000140)={0xf, 0x9}, 0xf) 18:19:48 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0a3f639788559d"], 0x7) fallocate(r1, 0x3, 0x0, 0x8020003) 18:19:48 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x101002, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000000040)) 18:19:48 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:48 executing program 1: syz_open_pts(0xffffffffffffffff, 0x140) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="2321202e2f66696c65300a1bf0914d79b0108062457ee63a210c8131c847e651602433accd113b8efcd6ca946b227d044574298914b3c55c0ead82ffc3d90a3ca6d7094b0858962f349da76b8cc70ef723ae9fbf59ec7e42e6f75ca5cbc5a88d53bd080d7970d17c1520537bae305cce90892b4383066d103a0bb31589d314b6399b1ae3e7576c0636866d4cd13a01f37109924d860444df711ed73891c81e630860e7d8547730138650a7486979a3726c1964576359981a726c1f50bae1bde529258729a027f318b0b42d75913c478a6dffac38abe41b509662970786c45cd0c0d5c5c4bdbfb1b727d2b112bdb2e38e1a767224e3feaa71d642159b3bf9d10646897b969f96392631957bcaef3101f5a734a22a1691dedc8b86e9c02da0c2591a8f3ad0d2a8137ae6813195afaf0f98325a11e40308839012984a91549124f1050b136cd29ae2ee58115f5d3db4840c35c97bb53d7ffa73e33b5eaa4699e31edf827eaf07bdd17a0e8faa89692705bee144094fd50500b713e74eb72889539aefc82910ef471357e03c22f2bafd8a688132b34559d00c4a238e0da82bf588f8ad0743091793bb9add50d12376bb1b005708680056a3115b30e1257a431a581566acad2ff440c39ec403234a47486e166d6fb918e97881539a62ee4349106f5a983ac886aebb8e9a606403d1b4af9d237752904963eea10c1ea3f0d390e051585af83416d47ddcbbf5423c821ab6234e37507fd52c6082c4947e2b66e2297284218c01f52ba81f5d8850606b00b0c951b575cab28f40a9a4a2b7f53330718ab57a5fc65208a415ef9f83a63a11702f0426765b75fda25472372636159598726db198a131c0c6e084b06b574e3b9313942e60e5c32eedf8f38690c173d14f7866e215f1d6601094fc8ede7cb9d9a58e990e19523dc3b4a32105633be5cbc43930408a7ebb9defff40e7caf9996f3aedaba64dc69df696d5a1913af69ce91f486fbe5f16e2712720267b835dd3aa9fe8e89f91ef31356150feaa7719ac1e5bffa8b28852a170557fb7da08afc07e4b04e1642a884f8bf39a00b9379c959ad212a6845e2be4c19402285cc5ec594d3352bd71bf50986f6c984f281593f764d89b4c73bf791ffd20793378c2f4bca22ab4df83cdc4add947f8b5bf1f57e7305d8089267b39877140f7d07754c9b3e613ffa52ced83aa51b215eb31b41ee233e377768da10dfa0c37c98508b2f02547978d19a154c3b8c39ea36b0a9a2c84effdec2e236830b76c4268de74b8267022e0e8aac0f3f9f4dee4a0a694d86fd04afd9793a5228525d8a5a3fb3364c0789a50d16ffabb40bc3b9863e27c467540335258cc2e25fdcd5bc710e4303bc45fc3eedd2ab3c8afece871df330dca3a855dfe3ad8b1c9a1df7848b9313acc6ad3aaa8c480db65cdac717ca0a246e8b0dbb50744b1e9a834a0e2468d78518a5a1250b5d369afec5e8288d2ef320a82402f74a649b9691fee45d9330b5c524c60da40d2ef09bc2cd863987e73149667063dcd12854c1a4c54726868e25819c2f10b96cd81f8dcb7c59d76134d167467285994376b5a9e600457282e6e0b2d6e3739985731aec60c77395b8efb5d043318d34fb91caea5a349ef60e2fc2cbb6b052c35b84fa2a3ee1ac0f815e70a956aeb56e1ad96630a87460299f4d340293a1380407a01bd0a009783c82c17da22697a55110cbd82089bed01831b1c144ed395b1d346e7872d14e92bbb53ba9775f2ae96af3c54bf40a59e0ffc7c6d6d118a83142aeb9848f2040765941b6abe9476b13598e3d8040b59216b9c71bc886d40821f15a3b3ebfeaf452a36b8e81fb247274431992492c9c6cecfa9a8f86bb66755eacf5d8fe84b595024a72a32b5d46cf97e35407ba2910ece48b818364e1c45278488d2f4e977a39cdf6503699b90b5588bdea8740556089c8632793baadb60c1758de7f5dd19eef974c4c17e9621c0669b1134a4a56d402b7459d4c17320f8f0bbfd0399a07c6a5023365997bb4c1352368ab642761edd768c01efe65e5f5f1ed169e152c2518d3298b4aedf04f5481d4664b7f08f5f17fba3ba91b1208d138fc2ed9e265fd7cc53b09f278627ae7a5784afc0740aef5dcc566d23312f4f9b63d17798e715b339997df39d220246815ace12c27f3d6b7729df0a37179d2254da4b866953d3c04c155c03ff5438cee280b6726e6fe110fb7da0f2479d195b77a7eb320fc4d85a78b2b64089dc0635f1ecb3e9093540b2ed39c86c605b6d823e3fa327f9c057075ebb3fc459bb7d36cd20dd8ccd83dd92ab437f26f37bba25ebc8a941b21223f1b48a245822ab452c1b90351bd6a05ffc0733d3a8cf1dd0e3819ba76e003d60d245a3c4f3cde857db2636bece8250b4edd1ddb98b18b1b17e3d1fe8030bae1f2de37aec9f4e065ac687b9b209d53bf02355e55bc623ba0d732c82b59e9566b79bd6515632b6efb553a6e6de7c094dcb0220bbb3939c534292b4a78d3dfe6218f80a1dc46b552ec79a3bf1447e0dfbf19cfa3b3271c7dd4c3d59029b49147f893e02fbf20b22113a079daa005843ec5b6eae4d99781f13a20c649353fc5af59cf6fa2739f3adde130b0a0d562787ce047df988ae33aef7ee90b906179f81522845b952cde4d71eefe33474d88700feccb129ca57b181e128bdb9ed36803fb8828dd7d67a380e132d024d2ffa426544dceac08434cc518d62ac82066092aabfecb94c2bdafdda85f23ddc00d1e7e9a2cf6fa08e5cdc2a1c059d02aabe90c36cc75789b043bcf4b34267d6c9fd9178110428c96aac65daf9e2bb87fd4699feb254df1dc9a91c44badbced9c793e9433bd4f7c74bab2af32a0fae4361e4e215a9c9365344f10c2b579f56e4ea3143807580f56f961eb451b38d26b80c5b26d0d04d7ecf92f0e150ccd2955aa0665339a3dfa139a6b683bd429e4d965f989e7ea2c327c25fedc0ff47c21d63e942137164e5fac250955d25dc2eae6edc84ee0f9c823e16767c4c55b03d6feb8818d91ebebd9f6f985d04fc754144d380fa42dad3bf19c786cd5606baaf0b3e6f60a5f021c87e0b78c8c1d6276fa4a9386209073e9e559c77c5bda858c3549935ef6ac8eb71daf215983b584708317c7f27cba841aa2e2ae052b597a753d2bde0378c14a0fe739b08d63637afd92d307f0bb0a49b02b9b2eec2cf111f25fd4cbc191d3a5dae5c13f071793a159d5c6981359427a30d1a9b8b3e78134b0535e402306732c9969a130ccf09bedcd6dd75cdee3df1a0a364705c356dbaac7915df6a163061c1f3a2642a59139b5e3ffe170f3efcb9f13eb5f28fd96c737296443374dba1ec4aa5e4e275f2891341d976c4f02641768a5def1887bcea8bed7769a0b35a91ea01397c7949e84329a2ee977186d12c59a8fcc09b61a48015367cdeefd3d83e2e36426e6660feed6aa8c6139e926cba9b8d17c3a6446b759fe9327ab2ff60ead80bbb97de4baa74b596e97c5ab1d470bdf0302b2dbffa7059482b3ca5550728c974f2d4f88291d496bf650cbff4617644962ed6491541e54a65b2265d2ac270f48085c33ee6ba145c74cca804ad4fc4dd2616fb88eded4cff2c52795d3a681f37f713ada8f768689518e808e0a392f3d3fa21204b56c8c4bd0044ada6735e664ef6c86dce1dc210669c680112260414e2b6a0106c0d469ecd772c19c5abf982378de906009dbacd978221daa61756f14bb580f828d4821de1b298be61f534a7b6f77fcc85373b0e9e19142f76fbd92b623780080f692b390ffb374837d8d90bcf3849366751e461c2b483133e877257e1f25e04cd5420fd342cc52afde1a5de1e8087da133ba19152ce97a15636ee6f865a4ad20e5a970024f206d405728bf32f7b909fc48ac3f6e59a8cfebca097e1fb898eb95ac6d8978e45caa37c1f9952970d15394e12d6170cba0a5b5fbf34caaf93d6223a03a4636c1fc866def41817b04e01091120284694075dcff985051060e2253e8dfbacff10e8eaa6e8172fa694d26dbd29228dff74962e742db223020251af7a5b91ecd3308c9ab4bd2c433e729112b401de8780b46ad4959afb40212645a784923f16cd189cb805dcd67e89bae2509404f8de41fab7900d8b4f322547595cf028bba4f6ba172ef49a8c2c3bed55dae433687dc6974ffa4f5876d593fc0eee3bc540be57d458f9b78719295ea186d6417abfde343f0ea38a1b23"], 0xbab) [ 490.452720] device hsr_slave_1 left promiscuous mode 18:19:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x2a0000, 0x0) ioctl$TIOCSIG(r0, 0x40045436, 0x2) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="28a0aa492bfb2f7ce5a3d2811df37d3213873f6efad8e0d54e754adf9459a5103c38925c5748e0630de8194a28ff7b72b9140442d7834e55aa9694eb0572a8c9f187de6e797a89f1157c14a4f8af322da1cb6d13c561fd50427c87f895b7103fbaaee7c976e15607f2de19adaf03b53d8e957624df28244b7249cc44851411eb5989375c37f9a704c8d343") r1 = syz_open_pts(r0, 0x140) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000140)={0x7b, 0xb, &(0x7f00000002c0)="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"}) openat$fb0(0xffffffffffffff9c, &(0x7f00000009c0)='\xce\x8f*\xf7\x00', 0x67514c7366170ade, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xbac) [ 490.503098] device hsr_slave_0 left promiscuous mode 18:19:48 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$binfmt_script(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xb85) [ 490.577863] team0 (unregistering): Port device team_slave_1 removed [ 490.609996] team0 (unregistering): Port device team_slave_0 removed [ 490.643543] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 490.715525] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 490.819826] bond0 (unregistering): Released all slaves 18:19:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 493.281104] IPVS: ftp: loaded support on port[0] = 21 [ 494.272997] chnl_net:caif_netlink_parms(): no params data found [ 494.314869] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.322457] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.329352] device bridge_slave_0 entered promiscuous mode [ 494.336612] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.344435] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.352054] device bridge_slave_1 entered promiscuous mode [ 494.372971] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 494.382505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 494.398718] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 494.406642] team0: Port device team_slave_0 added [ 494.414624] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 494.422183] team0: Port device team_slave_1 added [ 494.427568] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 494.435246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 494.493763] device hsr_slave_0 entered promiscuous mode [ 494.560454] device hsr_slave_1 entered promiscuous mode [ 494.603764] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 494.612155] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 494.625856] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.632451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.640140] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.646587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.679473] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 494.686473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.699143] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 494.709128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 494.716973] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.724167] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.739030] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 494.745778] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.757782] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 494.766589] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.773030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.791108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 494.798919] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.805649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.819703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 494.828141] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 494.839571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 494.859043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.869515] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.882753] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 494.889643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 494.897531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 494.906491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 494.924057] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 494.932223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 494.939154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 494.951569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 495.000845] device bridge_slave_1 left promiscuous mode [ 495.006489] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.051132] device bridge_slave_0 left promiscuous mode [ 495.057447] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.166503] device hsr_slave_1 left promiscuous mode [ 495.220153] net_ratelimit: 2 callbacks suppressed [ 495.220160] protocol 88fb is buggy, dev hsr_slave_0 [ 495.231511] protocol 88fb is buggy, dev hsr_slave_1 [ 495.270151] protocol 88fb is buggy, dev hsr_slave_0 [ 495.276526] protocol 88fb is buggy, dev hsr_slave_1 [ 495.308722] device hsr_slave_0 left promiscuous mode [ 495.340310] protocol 88fb is buggy, dev hsr_slave_0 [ 495.345922] protocol 88fb is buggy, dev hsr_slave_1 [ 495.364362] team0 (unregistering): Port device team_slave_1 removed [ 495.374955] team0 (unregistering): Port device team_slave_0 removed [ 495.385357] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 495.426385] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 495.498820] bond0 (unregistering): Released all slaves [ 495.510323] protocol 88fb is buggy, dev hsr_slave_0 [ 495.515631] protocol 88fb is buggy, dev hsr_slave_1 [ 495.554488] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 18:19:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000100), 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="08efb4055e0bcfe8385071") syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="77ba05434ae2", [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x82f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0x5a]}) 18:19:54 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:54 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) mkdir(0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) lstat(0x0, 0x0) setregid(0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) lsetxattr$smack_xattr_label(0x0, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:19:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:19:54 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="77ba05434ae2", [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x82f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:19:54 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000100), 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:54 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:54 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="08efb4055e0bcfe8385071") syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="77ba05434ae2", [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x82f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x8100, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0x5a]}) 18:19:54 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)) 18:19:54 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @local}, 0x8, {0x2, 0x0, @multicast2}, 'bpq0\x00'}) [ 497.570976] IPVS: ftp: loaded support on port[0] = 21 [ 498.151730] Bluetooth: hci0 command 0x1003 tx timeout [ 498.157747] Bluetooth: hci0 sending frame failed (-49) [ 498.445132] chnl_net:caif_netlink_parms(): no params data found [ 498.486847] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.494065] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.502769] device bridge_slave_0 entered promiscuous mode [ 498.509735] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.516743] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.524435] device bridge_slave_1 entered promiscuous mode [ 498.547147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 498.557317] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 498.579381] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 498.587284] team0: Port device team_slave_0 added [ 498.593422] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 498.600768] team0: Port device team_slave_1 added [ 498.606499] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 498.614830] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 498.682599] device hsr_slave_0 entered promiscuous mode [ 498.720454] device hsr_slave_1 entered promiscuous mode [ 498.764473] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 498.772540] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 498.787189] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.794061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.801058] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.807810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.842153] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 498.848634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.861864] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 498.872836] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 498.881360] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.888303] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.901967] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 498.908439] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.918392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 498.926189] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.932723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.962940] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 498.971627] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.978077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.985993] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 498.994427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 499.002621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 499.014258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 499.022946] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 499.029114] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 499.041608] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 499.056507] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 499.065233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 499.072401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 499.087682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.140847] device bridge_slave_1 left promiscuous mode [ 499.146563] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.191100] device bridge_slave_0 left promiscuous mode [ 499.196792] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.325136] device hsr_slave_1 left promiscuous mode [ 499.400400] device hsr_slave_0 left promiscuous mode [ 499.430156] protocol 88fb is buggy, dev hsr_slave_0 [ 499.435259] protocol 88fb is buggy, dev hsr_slave_1 [ 499.465112] team0 (unregistering): Port device team_slave_1 removed [ 499.476035] team0 (unregistering): Port device team_slave_0 removed [ 499.486729] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 499.535797] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 499.597225] bond0 (unregistering): Released all slaves [ 499.646650] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 18:19:58 executing program 0: 18:19:58 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:19:58 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:19:58 executing program 1: [ 500.230226] Bluetooth: hci0 command 0x1001 tx timeout [ 500.239088] Bluetooth: hci0 sending frame failed (-49) [ 501.901116] device bridge_slave_1 left promiscuous mode [ 501.907072] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.951353] device bridge_slave_0 left promiscuous mode [ 501.958318] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.055510] device hsr_slave_1 left promiscuous mode [ 502.094213] device hsr_slave_0 left promiscuous mode [ 502.123393] team0 (unregistering): Port device team_slave_1 removed [ 502.136134] team0 (unregistering): Port device team_slave_0 removed [ 502.146274] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 502.195769] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 502.272893] bond0 (unregistering): Released all slaves [ 502.310319] Bluetooth: hci0 command 0x1009 tx timeout [ 503.951549] IPVS: ftp: loaded support on port[0] = 21 [ 504.828173] chnl_net:caif_netlink_parms(): no params data found [ 504.861227] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.868212] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.875568] device bridge_slave_0 entered promiscuous mode [ 504.883796] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.892047] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.899364] device bridge_slave_1 entered promiscuous mode [ 504.916800] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 504.926373] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 504.943624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 504.951127] team0: Port device team_slave_0 added [ 504.956895] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 504.964529] team0: Port device team_slave_1 added [ 504.970291] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 504.978189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 505.062475] device hsr_slave_0 entered promiscuous mode [ 505.100339] device hsr_slave_1 entered promiscuous mode [ 505.140850] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 505.148588] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 505.162669] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.169600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.176276] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.182949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.211157] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 505.217963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.226677] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 505.235718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 505.244528] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.261830] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.272798] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 505.279149] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.288240] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 505.296212] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.302606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.313426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.321711] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.328284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.347222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 505.358329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 505.368923] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 505.375999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.384862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.393056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.401357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.409858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 505.416965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.429319] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 505.438338] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 505.446877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 505.457685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.820446] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 18:20:04 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:04 executing program 0: 18:20:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:04 executing program 1: 18:20:05 executing program 1: 18:20:05 executing program 0: 18:20:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:05 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @random="77ba05434ae2", [], {@ipv6={0x86dd, {0x0, 0x6, "6c48a3", 0x14, 0x82f, 0x0, @remote, @mcast2, {[], @tcp={{0x0, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000000c0)={0x0, 0x2, [0x0, 0x5a]}) [ 506.803158] Bluetooth: Unknown HCI packet type 5e [ 506.808648] Bluetooth: Unknown HCI packet type 43 [ 506.838848] Bluetooth: Data length is too large 18:20:05 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000024c0)=[{{&(0x7f0000000680)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000900)=[{&(0x7f00000006c0)="c0", 0x1}, {&(0x7f0000000780)="d1", 0x1}], 0x2, &(0x7f0000000940)=[@ip_retopts={{0x10}}], 0x10}}, {{&(0x7f00000009c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000a00)}, {&(0x7f0000000b00)="237c1c", 0x3}, {&(0x7f0000000b40)="f44fc7536fc44f09a2a50271", 0xc}, {&(0x7f0000000b80)="9eced87383494a96d9d6facdbececf3c18161612616c710661a03c3d50352a7f6965e76bac614ab80e5399a3322691a6f120e970a7dcbf7564f3c88698b77ea95d30eb69ff2f8a5e08a2c377146c81a9cd2753eb0d2da5b1bfda71c1dee7d9ac674a6e6d341f8bb5c4200c42690925ba37991e85b645957e2bbb80b7e924569f5f3569", 0x83}], 0x4, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0x38}}, {{0x0, 0x0, &(0x7f0000001f80)=[{0x0}, {&(0x7f0000001d00)="b8", 0x1}], 0x2, &(0x7f0000002000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0x18}}], 0x3, 0x8000) [ 506.870165] net_ratelimit: 4 callbacks suppressed [ 506.870171] protocol 88fb is buggy, dev hsr_slave_0 [ 506.881753] protocol 88fb is buggy, dev hsr_slave_1 18:20:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clock_gettime(0x2, &(0x7f0000000380)) 18:20:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 18:20:05 executing program 1: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x82, &(0x7f0000000200), 0x8) [ 508.160736] device bridge_slave_1 left promiscuous mode [ 508.166618] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.210913] device bridge_slave_0 left promiscuous mode [ 508.216542] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.334144] device hsr_slave_1 left promiscuous mode [ 508.384234] device hsr_slave_0 left promiscuous mode [ 508.425131] team0 (unregistering): Port device team_slave_1 removed [ 508.436124] team0 (unregistering): Port device team_slave_0 removed [ 508.447118] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 508.493936] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 508.596539] bond0 (unregistering): Released all slaves [ 508.870123] Bluetooth: hci0 command 0x1003 tx timeout [ 508.875662] Bluetooth: hci0 sending frame failed (-49) [ 510.291585] IPVS: ftp: loaded support on port[0] = 21 [ 510.950216] Bluetooth: hci0 command 0x1001 tx timeout [ 510.956048] Bluetooth: hci0 sending frame failed (-49) [ 511.276590] chnl_net:caif_netlink_parms(): no params data found [ 511.309188] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.315917] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.323028] device bridge_slave_0 entered promiscuous mode [ 511.330458] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.336979] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.344819] device bridge_slave_1 entered promiscuous mode [ 511.360732] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 511.371292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.388162] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 511.396262] team0: Port device team_slave_0 added [ 511.403792] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 511.411096] team0: Port device team_slave_1 added [ 511.416741] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 511.424451] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 511.493341] device hsr_slave_0 entered promiscuous mode [ 511.540648] device hsr_slave_1 entered promiscuous mode [ 511.581121] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 511.589114] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 511.602494] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.609302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.616117] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.622777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.651585] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 511.658116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.667231] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 511.676466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.683947] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.691818] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.702128] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 511.708866] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.718950] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.727311] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.733924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.745192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.754555] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.761568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.781046] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.789597] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.798425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.807165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.818018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.828191] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 511.834984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.848880] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 511.857618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 511.865138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 511.876379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.270867] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 513.031031] Bluetooth: hci0 command 0x1009 tx timeout [ 513.590214] protocol 88fb is buggy, dev hsr_slave_0 [ 513.595705] protocol 88fb is buggy, dev hsr_slave_1 18:20:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 514.730416] device bridge_slave_1 left promiscuous mode [ 514.736284] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.781095] device bridge_slave_0 left promiscuous mode [ 514.786989] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.902925] device hsr_slave_1 left promiscuous mode [ 514.942800] device hsr_slave_0 left promiscuous mode [ 515.023754] team0 (unregistering): Port device team_slave_1 removed [ 515.036000] team0 (unregistering): Port device team_slave_0 removed [ 515.045977] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 515.094126] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 515.169784] bond0 (unregistering): Released all slaves 18:20:15 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:15 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) ptrace$getregs(0xe, 0x0, 0x0, 0x0) getpgid(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000040)='nodev\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0xb517, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0)=0x1ff, 0x4) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socket$inet6(0xa, 0x80003, 0xff) listen(r2, 0x0) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$unix(r2, 0x0, 0x0, 0x0) 18:20:15 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0a3f639788559df0515842"], 0xb) fallocate(r1, 0x3, 0x0, 0x8020003) lseek(r1, 0x0, 0x3) 18:20:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 18:20:15 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:15 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 517.002760] Bluetooth: Unknown HCI packet type 5e [ 517.024883] Bluetooth: Data length is too large [ 517.045941] Bluetooth: Unknown HCI packet type 40 18:20:15 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) 18:20:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0xffffff2d, 0x4, r2}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14, 0x1, {0x0, 0x0, 0x0, r2}}}}}]}, 0x50}}, 0x2000044) 18:20:15 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) ptrace$getregs(0xe, 0x0, 0x0, 0x0) getpgid(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cg\xab.\xc4\xd0\xcex\x177\x84\x0e\x95q\xd7\xf7d\xd2\x1di\x04\x18\xa9\xe5%\x12Z\xfdH\xd2\x8cp\xcc\xc4=\'\x00\xab\x1d\x99\x03\x91Kt\x98Q\x8eB\x92\x02p\xc8\\6\x86T\xb1\xfa\xaf\x8c\x8b\x94\xa5\xa2\x8aU\x14&\xab\x9c%\xd0>|\xbc\xe0\xab\xdd\xdd\x93\xf9q\x19\x86F\xd7Y\x19\v\x13\x17\xc0\x1brd.\x17\xad\xd5\x00$\x01\x87\x96\xd3XA\xb3\xb7\x81\xcd6\xd3\xe2\x8e\x8c\xd0\xf4y\xc5\x1e2\xd25\xdc\x0f\xd9\x8f~\'\xe2\xc9mCmA~\x0e\xfch\x94<(\xd3f\xbd\xc3\x91\x017L\x14X\xaf\x99\x90\x8bv\x9b#|z\x9a\x99\xaf\xbd\xb7{qJ>\"\x90\xc8\b\xc6~\rN\x16\xa5\xde\x98\xb3\xb2\xb5\xees]$\x12\xfb\xd1\n\xd5\xbe\xe4\xc4\xfd\x8c\x9e\xa6\x86WQ\xae\xaf\xf8(,\xff#\xe8|f\xcb\xaa\x1e,\xfc\xfa\xefI\x9d=$\x14\x8aI\x85_\xa6\n6\xabZ\xc5N\xa6\x1c\x8c\xd4\xf8z\xcd\\\x98gq\xc8\'\xd3\xb5\xb7\x98s\xd8\x9e}\xbbS\x98\xdc\xfa\xd1\x9b\xdcW\xaa\xe6{q\xae\xfc\b\xf1\xc4\xd9R#<\x1e\x1d2}!\xc1\xfd\xbdS\r\x8a\x11P(\xf5\xdf\xde\xde\x03g\'\x8b\xab7\\\n\x9e\xa8\xe2\x80@\x9f]\x1f,\x88\xfc\xc5\xad\x94\x00V\x8a-\xfbH\xd4\xa4\x9f\xda\x8e\x93\xc0\xbd\xd9qV}B{\xc3\xc6oT\xa9!3\xa9\xe3\x98\x99$d\xec\x9c5\xdd\xea', 0x200002, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x6, &(0x7f0000000040)='nodev\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040)=0xb517, 0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000000c0)=0x1ff, 0x4) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) socket$inet6(0xa, 0x80003, 0xff) listen(r2, 0x0) connect$unix(r1, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) accept4$unix(r2, 0x0, 0x0, 0x0) [ 517.164954] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:15 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:15 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r2) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffe86, 0xda, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, 0xffffffffffffffff}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)={0x26, {{0xa, 0x4e20, 0x3, @mcast2, 0x1}}, 0x30d83e4aeb8feea8, 0x1, [{{0xa, 0x4e20, 0x6, @empty, 0xffff}}]}, 0x110) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close(r3) unshare(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) 18:20:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) socket$unix(0x1, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) r5 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000140)={{0x6, 0x5ea9aab4c664a4ba, 0xffffffe0, 0x2}, 0x4, 0x0, 0x3, r5, 0x4, 0x8, 'syz1\x00', &(0x7f00000000c0)=['trusted.overlay.opaque\x00', 'y\x00', 'mime_typeeth1\x00', 'Mmime_typeposix_acl_access(vboxnet0\x00'], 0x4b, [], [0x1c00, 0xffff, 0x0, 0x4f0d]}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x79) pkey_alloc(0x0, 0x1) [ 519.021068] IPVS: ftp: loaded support on port[0] = 21 [ 519.030309] Bluetooth: hci0 command 0x1003 tx timeout [ 519.035675] Bluetooth: hci0 sending frame failed (-49) [ 519.864108] IPVS: ftp: loaded support on port[0] = 21 [ 519.912286] chnl_net:caif_netlink_parms(): no params data found [ 519.968281] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.975462] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.983327] device bridge_slave_0 entered promiscuous mode [ 519.991113] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.997573] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.005057] device bridge_slave_1 entered promiscuous mode [ 520.027321] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 520.038494] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.058106] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 520.065518] team0: Port device team_slave_0 added [ 520.072344] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 520.079835] team0: Port device team_slave_1 added [ 520.086195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 520.093907] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 520.164223] device hsr_slave_0 entered promiscuous mode [ 520.200627] device hsr_slave_1 entered promiscuous mode [ 520.254482] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 520.262526] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 520.305806] chnl_net:caif_netlink_parms(): no params data found [ 520.327476] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.333915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.340972] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.347890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.377104] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.384380] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.392032] device bridge_slave_0 entered promiscuous mode [ 520.399476] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.406060] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.413441] device bridge_slave_1 entered promiscuous mode [ 520.435846] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 520.447514] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.473278] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 520.481240] team0: Port device team_slave_0 added [ 520.487524] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 520.495267] team0: Port device team_slave_1 added [ 520.501367] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 520.509400] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 520.562484] device hsr_slave_0 entered promiscuous mode [ 520.610727] device hsr_slave_1 entered promiscuous mode [ 520.661743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 520.668988] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 520.688707] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.695577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.702596] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.709183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.725979] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 520.733022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.744778] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 520.757108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.765084] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.772445] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.779704] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.786860] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.797023] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 520.804758] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.824406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 520.832683] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.839441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.857951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.865871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.875202] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.881916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.893741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 520.903726] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 520.914298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 520.924713] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 520.934935] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 520.942074] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.948634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 520.958534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 520.966583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 520.974546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 520.984156] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 520.992518] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.000643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.008885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.019272] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 521.031618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 521.044792] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 521.052350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.065538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.073531] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.080133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.087584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.096089] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.103864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.110428] Bluetooth: hci0 command 0x1001 tx timeout [ 521.111606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.116282] Bluetooth: hci0 sending frame failed (-49) [ 521.126339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 521.141563] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 521.147679] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.155734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.165437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.173805] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.180373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.191154] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 521.200884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 521.208916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.217818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.228633] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 521.236685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.244838] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.255027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 521.264100] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.272537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.280568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.290803] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 521.300381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 521.308162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.316534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.324314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.332374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.343063] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 521.349123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.360745] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 521.368705] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 521.378323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.386869] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.399614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.415566] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 521.424216] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 521.431900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.439254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.456236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.190616] Bluetooth: hci0 command 0x1009 tx timeout [ 523.510466] protocol 88fb is buggy, dev hsr_slave_0 [ 523.515709] protocol 88fb is buggy, dev hsr_slave_1 [ 524.150669] device bridge_slave_1 left promiscuous mode [ 524.156408] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.201181] device bridge_slave_0 left promiscuous mode [ 524.206807] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.345230] device hsr_slave_1 left promiscuous mode [ 524.394849] device hsr_slave_0 left promiscuous mode [ 524.454617] team0 (unregistering): Port device team_slave_1 removed [ 524.464937] team0 (unregistering): Port device team_slave_0 removed [ 524.475939] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 524.507350] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 524.564385] bond0 (unregistering): Released all slaves [ 526.840375] device bridge_slave_1 left promiscuous mode [ 526.845910] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.901157] device bridge_slave_0 left promiscuous mode [ 526.908448] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.024708] device hsr_slave_1 left promiscuous mode [ 527.063757] device hsr_slave_0 left promiscuous mode [ 527.122821] team0 (unregistering): Port device team_slave_1 removed [ 527.133993] team0 (unregistering): Port device team_slave_0 removed [ 527.143937] bond0 (unregistering): Releasing backup interface bond_slave_1 18:20:25 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="3801e000000200"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff0000000032000000ac14140000000000000000000000000000000000000000685dcca8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a229be87000000000000000000000000000000000000002000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000004000"/240], 0x138}}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) setresgid(r8, 0xffffffffffffffff, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x2, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@allow_other='allow_other'}], [{@smackfsdef={'smackfsdef', 0x3d, '+'}}, {@obj_type={'obj_type', 0x3d, '#cpusetsecurity@vboxnet0'}}, {@subj_role={'subj_role', 0x3d, '\\vboxnet0ppp0proccgroup}lo*'}}, {@obj_role={'obj_role', 0x3d, 'group_id'}}]}}) bind$unix(r2, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='security.ima\x00', &(0x7f0000000480)=@md5={0x1, "f78bdc63822611340897b1d265f5055b"}, 0x11, 0x3) 18:20:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:25 executing program 1: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f0000002e80)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x200001ff) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000340)=r8) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000140)={r8, 0xffffffffffffffff, 0x9, 0x96, &(0x7f0000000080)="88ac0dffe7b0d57fec9f969af76ed748f4571432df585ba11431b4778e94633df7ef327116561c380f2c9ef6dfed993903363aad5cde5b7a0809ce4a9b73e9ca731f97f13596d409c940c22baa5349b09f1502de241f528bd50212e495b120045d0b0476c1abba4c2ddda35c228e44a493ce65df65b940cbf5b7eba2f2fc3dd11d100b508aab150cfeea78b94abe0d23cc5fa8fa5582", 0x80, 0x6, 0x200, 0x5, 0x4, 0x2, 0x20, 'syz0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r10) ioctl$VIDIOC_SUBDEV_G_FMT(r10, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x5, 0x2000002, 0x0, 0x6, 0x1, 0x0, 0x0, 0x2}}) close(r1) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SG_SET_COMMAND_Q(r11, 0x2271, &(0x7f0000000240)=0x1) close(r0) 18:20:25 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 527.183550] bond0 (unregistering): Releasing backup interface bond_slave_0 18:20:25 executing program 1: r0 = creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xffffffffffffffb7, 0x0) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f00000000c0)={0xc, 0xffff, 0x101, 0x100000, r0}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0xfffd, @multicast1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000004000000000040cb0000246772657461700000dad6250000000000009f996100000a90c96b0000001d799bd000000000000000000000aac9ca0f08222f38f2a252bf"], 0x60}}, 0x0) [ 527.268400] Bluetooth: Unknown HCI packet type 5e [ 527.278620] Bluetooth: Unknown HCI packet type 43 [ 527.294506] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=512 sclass=netlink_xfrm_socket pig=19717 comm=syz-executor.0 [ 527.311870] Bluetooth: Data length is too large 18:20:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:25 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="66443dc78283b657af433092bff09db8bd06a1c250d5c679f66eff7dac46f202457dae2be4c3efb47c6e184c58e600000028617f57edfa6cfa921f5a1daaecebd95e536c994a24", @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040003,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="00c9"]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000340)=r6) fcntl$dupfd(r1, 0x406, r6) read$FUSE(r3, &(0x7f00000040c0), 0x14ec) utimes(&(0x7f0000000000)='./file0\x00', 0x0) read$FUSE(r3, &(0x7f0000001000), 0x1000) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) r7 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) tkill(r7, 0x1000000000016) write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) waitid(0x1, r7, &(0x7f0000000080), 0x3, &(0x7f0000000380)) [ 527.366459] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=512 sclass=netlink_xfrm_socket pig=19717 comm=syz-executor.0 [ 527.386689] bond0 (unregistering): Released all slaves 18:20:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 527.473902] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 18:20:25 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000240), 0x4) getpid() r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000180)=@raw=[@map, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2712b011d2548b93}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026, r4}, &(0x7f0000000380)={0x80, 0x1, 0x3, 0xfffffff9, 0xc0, 0x6}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r5, 0x0, 0x21, 0x0, &(0x7f00000001c0)) write(r5, &(0x7f0000000500)="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", 0x1000) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="886386dd07"], 0x70ad) 18:20:25 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 527.695862] device nr0 entered promiscuous mode [ 529.270222] Bluetooth: hci0 command 0x1003 tx timeout [ 529.275566] Bluetooth: hci0 sending frame failed (-49) [ 529.841674] IPVS: ftp: loaded support on port[0] = 21 [ 530.744863] IPVS: ftp: loaded support on port[0] = 21 [ 530.814462] chnl_net:caif_netlink_parms(): no params data found [ 530.858252] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.865642] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.873000] device bridge_slave_0 entered promiscuous mode [ 530.880828] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.887502] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.895028] device bridge_slave_1 entered promiscuous mode [ 530.917185] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 530.930626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 530.996220] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 531.004530] team0: Port device team_slave_0 added [ 531.010133] chnl_net:caif_netlink_parms(): no params data found [ 531.020785] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 531.028848] team0: Port device team_slave_1 added [ 531.035553] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 531.046591] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 531.123814] device hsr_slave_0 entered promiscuous mode [ 531.160715] device hsr_slave_1 entered promiscuous mode [ 531.221369] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 531.233802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 531.252321] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.258859] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.266124] device bridge_slave_0 entered promiscuous mode [ 531.276695] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.284530] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.291709] device bridge_slave_1 entered promiscuous mode [ 531.313990] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 531.323807] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.331322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.338456] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.344924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.352083] Bluetooth: hci0 command 0x1001 tx timeout [ 531.357723] Bluetooth: hci0 sending frame failed (-49) [ 531.363526] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 531.384169] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 531.392638] team0: Port device team_slave_0 added [ 531.405250] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 531.412955] team0: Port device team_slave_1 added [ 531.418926] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 531.429877] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 531.502567] device hsr_slave_0 entered promiscuous mode [ 531.540627] device hsr_slave_1 entered promiscuous mode [ 531.582404] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 531.591191] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 531.608679] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.615667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.623027] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.629642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.650356] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 531.657021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.668810] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 531.680661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.687926] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.695363] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.704068] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.711716] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.723387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 531.729492] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.741050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 531.748821] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.755776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.768509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 531.776352] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.782773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.797043] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 531.806626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 531.816245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 531.828818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.839887] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 531.848723] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 531.859403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 531.867504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 531.875737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 531.884280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 531.892582] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 531.901590] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 531.910221] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 531.918033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.926075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.935294] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 531.945303] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 531.954097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 531.962460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 531.969970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 531.977719] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 531.986739] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 531.994100] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.002156] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 532.008185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.023880] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 532.035900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 532.044759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.052995] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.061197] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.067643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.075106] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.083452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.091966] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.099862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.109498] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 532.119541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 532.127900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.137954] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 532.148702] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 532.155901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.163449] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.171531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.184139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.194738] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 532.202415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.210885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.219635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.234545] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 532.242169] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.251882] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.262592] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 532.271890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.279713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.292002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 532.299051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.307384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.319024] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 532.326013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.344480] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 532.353766] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 532.361669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 532.368823] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 532.389990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.660251] protocol 88fb is buggy, dev hsr_slave_0 [ 532.665506] protocol 88fb is buggy, dev hsr_slave_1 [ 532.720201] protocol 88fb is buggy, dev hsr_slave_0 [ 532.725572] protocol 88fb is buggy, dev hsr_slave_1 [ 532.780174] protocol 88fb is buggy, dev hsr_slave_0 [ 532.785613] protocol 88fb is buggy, dev hsr_slave_1 [ 532.950272] protocol 88fb is buggy, dev hsr_slave_0 [ 532.955523] protocol 88fb is buggy, dev hsr_slave_1 [ 533.430790] Bluetooth: hci0 command 0x1009 tx timeout [ 533.910484] protocol 88fb is buggy, dev hsr_slave_0 [ 533.915924] protocol 88fb is buggy, dev hsr_slave_1 [ 534.230998] device bridge_slave_1 left promiscuous mode [ 534.237054] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.290926] device bridge_slave_0 left promiscuous mode [ 534.296703] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.425562] device hsr_slave_1 left promiscuous mode [ 534.483449] device hsr_slave_0 left promiscuous mode [ 534.523793] team0 (unregistering): Port device team_slave_1 removed [ 534.535617] team0 (unregistering): Port device team_slave_0 removed [ 534.545767] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 534.585093] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 534.675147] bond0 (unregistering): Released all slaves [ 536.830369] device bridge_slave_1 left promiscuous mode [ 536.836012] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.871281] device bridge_slave_0 left promiscuous mode [ 536.877657] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.012844] device hsr_slave_1 left promiscuous mode [ 537.053573] device hsr_slave_0 left promiscuous mode [ 537.113988] team0 (unregistering): Port device team_slave_1 removed [ 537.123751] team0 (unregistering): Port device team_slave_0 removed [ 537.134715] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 537.183311] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 537.269834] bond0 (unregistering): Released all slaves 18:20:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:35 executing program 0: munlockall() prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000), 0x0) socketpair(0x22, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc822, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xaec6e57c6afbed62}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000140)) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x1c) msgget$private(0x0, 0x1d9d0f791b60a80e) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = semget$private(0x0, 0x8, 0x0) semop(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x1000}], 0x1) semctl$GETZCNT(r1, 0x1, 0xf, &(0x7f0000000600)=""/4096) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB="011000465f00000000000000"]) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000440)={0xfffd, 0x0, 0x10000, 0x6}) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000002c0)={0x14, 0x49, 0x2, {0x40, 0x0, 0x3}}, 0x14) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, 0x0, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000000040)=""/117) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$sock_ifreq(r0, 0x8937, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x501001, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000400)) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000003c0)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 18:20:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:35 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000240), 0x4) getpid() r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000440)={0x0, @reserved}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000140)="40c74adc7724e27d876f441d952bf111375896d876c4ed0f2e703cd5f8b64ff3cd946b507daea1c09fc1fe6c"}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000200)=0xa7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000180)=@raw=[@map, @alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2712b011d2548b93}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f00000018c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\a\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83CZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x98\x86\"R\x06\x00\x00\x00\x00\x00\x00\x00\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x0e\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xfeu\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&\x014\x01\xf4\xb7\x83\x9a\xfa*\xa6\x06\xb7Pk7N\xc2\xd9\xee\xd0\xb0M\x00\xab\xc3\t\fc\xd8dx\xd5\x1dU*s)\x12[\x14\xb1\xc0\xd7\x1a\xa0\x16\xa2z\x9e\x93 \xddeF>29\v\x02\xa2b\x13R\xef\xffA,\xb9.$\xfa\x9f\xde[\x80\xd1=\xce\x1b\xeb\xf6\xf4\xe3z\x1f\x9dz\xa3\xc0\xe2\xa2\xb1\xeeq\xf5\xec0\x8e\xf4\xfb\xd9\x87\xf03\xdb\xae|\x10&V5c\xa6\xce\xcd\x8a\xdf\xe1\x89\"\xea\xde\xe7\xa3\xbe\xe7\xff\xf9 \x11\xfdY\xc6\xa1\xe8\xda\v\\?\xcb\x87\bn\x9b\x01\x1f\xf8\xe8\x1eV\xfaC\xdf\xc3Vv\x9b\x1a\xfc\x14.c\x94\xc9=\xb0\x0f!d\b\x18*@m\x7f\xaal\x17G\xd6?\x81\x16P\x03\x10e\xc3\xcd\xb1B\xeb\x01B\\\x91A\xa1\x8an\xb4#\xadr\x1e\x81v\xa2\x0e6x\xca\x8b\xa6\xd8\x81\x10:\x0e(\xdd\xfc\xc9\xc6\xb4\xf0\'f:\xbd\xfe\x11\xf8\xc8W\x81s^\xd9W\xf1\x94\xaf\xc5\x8a\xb4f\x1b\x17E\xb23\x12\xb0\xeb\xef\x8c\xb24h\xd7}\x7f\x92Hgej\x957\xe2A') r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) capset(&(0x7f0000000340)={0x20071026, r4}, &(0x7f0000000380)={0x80, 0x1, 0x3, 0xfffffff9, 0xc0, 0x6}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r5, 0x0, 0x21, 0x0, &(0x7f00000001c0)) write(r5, &(0x7f0000000500)="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", 0x1000) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="886386dd07"], 0x70ad) 18:20:35 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 537.609719] bond0: Error: Device is in use and cannot be enslaved [ 537.642411] bond0: Error: Device is in use and cannot be enslaved 18:20:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) [ 537.671764] device nr0 entered promiscuous mode 18:20:35 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:36 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:36 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = accept$inet6(r0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000040)) recvfrom$inet6(r2, 0x0, 0x0, 0x88629b639aa392a2, 0x0, 0xffffffffffffff94) 18:20:36 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:36 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) [ 540.001616] IPVS: ftp: loaded support on port[0] = 21 [ 540.754562] IPVS: ftp: loaded support on port[0] = 21 [ 540.827431] chnl_net:caif_netlink_parms(): no params data found [ 540.891511] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.898455] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.907445] device bridge_slave_0 entered promiscuous mode [ 540.937776] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.945351] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.953905] device bridge_slave_1 entered promiscuous mode [ 540.993445] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 541.003879] chnl_net:caif_netlink_parms(): no params data found [ 541.015769] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 541.047675] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 541.057368] team0: Port device team_slave_0 added [ 541.068504] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 541.077875] team0: Port device team_slave_1 added [ 541.098686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 541.107565] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.115191] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.124308] device bridge_slave_0 entered promiscuous mode [ 541.132175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 541.147061] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.155268] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.166967] device bridge_slave_1 entered promiscuous mode [ 541.224278] device hsr_slave_0 entered promiscuous mode [ 541.270577] device hsr_slave_1 entered promiscuous mode [ 541.315872] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 541.325086] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 541.335844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 541.349707] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 541.375380] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 541.384587] team0: Port device team_slave_0 added [ 541.391419] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 541.399572] team0: Port device team_slave_1 added [ 541.406703] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 541.416136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 541.432255] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.439611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.446461] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.453447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.514552] device hsr_slave_0 entered promiscuous mode [ 541.570585] device hsr_slave_1 entered promiscuous mode [ 541.613777] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 541.623504] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 541.644282] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.652025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.664471] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.672318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.717489] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 541.727057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.739013] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 541.755645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.766011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.775929] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.785120] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.793087] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.801693] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.811524] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 541.822740] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 541.829649] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.838071] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 541.849720] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 541.858446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.866436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.878006] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 541.884882] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.896937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 541.906367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.915525] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.924291] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.933231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.944837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 541.954663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 541.964269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.973737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.984000] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.993176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.003086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.013019] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.022709] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.030418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.039600] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 542.051409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.063343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.073735] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.082936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.094954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 542.104883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.114818] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 542.124236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.134650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 542.144354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.154923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 542.167191] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 542.177322] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.188281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.197498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.206199] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.216288] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 542.226446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.235896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.244522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.254326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 542.265463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.273655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.284857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 542.298947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 542.309101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 542.317174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.326462] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.335579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.344639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.354046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.365493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.378367] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 542.385646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.402463] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 542.411664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.421369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.432958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 542.441666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.451383] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.460962] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 542.468624] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 542.475455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.489459] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 542.496979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.505157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.516950] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 542.528400] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 542.535281] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 542.543250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 542.551599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.566114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.310643] protocol 88fb is buggy, dev hsr_slave_0 [ 544.317280] protocol 88fb is buggy, dev hsr_slave_1 18:20:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:42 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) 18:20:42 executing program 1: modify_ldt$write(0x1, &(0x7f0000000040)={0x172, 0x20000800, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x10) r0 = open(&(0x7f0000000000)='./file0\x00', 0xc32000, 0x195) fcntl$setpipe(r0, 0x407, 0x2) 18:20:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000840), &(0x7f0000000280)=0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000f40)='cgroup\x00controC\x12\x12\x98\xd1l\x06\x00\x00\x00H=\xc10U\xa0\x8b\x15\xb4\x8a\x7f{CgLN\x109\x13\xc3\xd6\xcf\xa5\xf5K\x04\xb2\xf3\x997 \xff\x05\x81\x19&Y[\x8f]\x9c\xfa\x84e\\\xd4\xe9L\x04@4\x84\xd8\xf8\xde\x9f\xbd\xc8;\x94\xad\xd2\x8c\v\xc6I6#\xa0\xcbB7/\x1e\x14WT\xf8\xcd\x94\xb0N\x89\x85\xb2S\xffE\x14q\xc2\x1c\xf4\rp;}\xdd\x86\x04u\xa1R\xae+\x8d\x81\x98d\x1e0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000000c0)={r9}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000380)={r9, 0xd7, 0xbb, "81e25104658fbc730ef808e8f29a693116efa583d82ce36a9cb0e1bee68d3ceb420e4a5387bed98d25250f960b8df336fc0d7ec027d7aa3b0b71a75ef4aaa4033afd485638324286fbea9c48bfe97376bbbd6b99f29b81de17fdb52a78d6fa131d2b3a010d123b296c17ce159c71f4eeb45b644517e7730192fb9ba9693c40b4343b9db70c3cc8a95b800fd78c1b5c917ed9f181f3b2b62dfd767ccbe7ef5229b17758792d4af4325ff97b58f7a77028d9f650e9c9ccabe494f0db"}, 0xc3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={r6}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={r6, 0x5, 0x0, 0x3ff, 0xff}, &(0x7f0000000080)=0x18) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) r10 = semget$private(0x0, 0x0, 0x88) semctl$IPC_RMID(r10, 0x0, 0x0) 18:20:42 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:42 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) 18:20:43 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) open(0x0, 0x48a100, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x35ac0930) vmsplice(r2, &(0x7f0000000180), 0x139, 0x3) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000580)=0x80) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0xd6e6102881d4300f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000280)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) splice(r6, 0x0, 0xffffffffffffffff, 0x0, 0x420000a77, 0x0) fcntl$setstatus(r6, 0x4, 0x2000) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x1) socket(0x0, 0x80002, 0x0) socket$inet6(0xa, 0x0, 0x0) 18:20:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:43 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 545.510785] device bridge_slave_1 left promiscuous mode [ 545.524449] bridge0: port 2(bridge_slave_1) entered disabled state 18:20:43 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) getsockname$tipc(r1, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0xffffffff, 0x9, 0x9, 0x0, 0x9}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext={0x9, 0xffffffff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {0x0, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x5, 0x6, 0x0, 0x0, 0x80000000, 0xe54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r6, 0x5501, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r6, 0x6612) mkdir(0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000200)='security.selinux\x00', &(0x7f0000000300)='unconfined_u:\xf3ystem_r:insmod_\x89$s0-s0:c0.c1023\x00bj*\x98\x1c\xc0L\t\x1e\xd6\x82\xc7\xa6\x81mW\x8dN\x97}\x88\x9d\xf307!\x04|=9\x82\xb5\xc8*\xe8\xffv5\xca\r\xff\x8e\xb5\x82\xf60\x901\r\xd8V\xe9\xbc\xd6S)\xf8@R\xda>\x1d\xaf\x05\xbd\xfc! \x9a\xf3\x99\x06\xa98\xe2\xc6U\xeb\xe0e\xd0\xd6\xec\x03a\x8a\xf2C\xf4\x13\xd7Q\xb5\xb0O\x81\x94\x1f\x92\xaf\xab7\x89X\x190x{\x0f\xe3\xeb\x15\xec\xdc\x8b\xa2\x9b\xf4\x90\xf7\xf9\bmHh\x90(\x1c\xe1\":\x92\xaa\x99', 0xb4, 0x0) fallocate(r7, 0x0, 0x0, 0x8020003) syz_open_dev$tty20(0xc, 0x4, 0x0) 18:20:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:43 executing program 1: r0 = socket(0x10, 0x9, 0x2) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r2, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @empty=[0x4, 0x4, 0x1004788, 0x8035, 0x0, 0x100000000000000], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @remote={0xac, 0x24}, @local}, @dccp={{0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0xe, 0x0, "e57044", 0x0, "cd98e8"}}}}}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x2, 'veth0\x00', {0x400}, 0x7}) [ 545.593194] device bridge_slave_0 left promiscuous mode [ 545.616399] bridge0: port 1(bridge_slave_0) entered disabled state 18:20:43 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) [ 545.805608] dccp_invalid_packet: invalid packet type 18:20:44 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:44 executing program 0: io_setup(0x40000000000008, &(0x7f00000001c0)=0x0) r1 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3c) ptrace$cont(0x18, r2, 0x0, 0x0) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r2, 0x0, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x210000, 0x0) bind$netrom(r3, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x3c) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r4, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0) socket$inet6(0xa, 0x80000, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000340)=r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) kcmp$KCMP_EPOLL_TFD(r2, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000040)={r7, r8, 0x2}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}], 0x10) io_submit(r0, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="10", 0x1}]) [ 546.070542] device hsr_slave_1 left promiscuous mode [ 546.133978] device hsr_slave_0 left promiscuous mode [ 546.169977] team0 (unregistering): Port device team_slave_1 removed [ 546.199378] team0 (unregistering): Port device team_slave_0 removed [ 546.233306] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 546.304446] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 546.449043] bond0 (unregistering): Released all slaves [ 548.131588] IPVS: ftp: loaded support on port[0] = 21 [ 548.991772] IPVS: ftp: loaded support on port[0] = 21 [ 549.022810] chnl_net:caif_netlink_parms(): no params data found [ 549.074644] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.081421] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.088534] device bridge_slave_0 entered promiscuous mode [ 549.099762] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.107476] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.115946] device bridge_slave_1 entered promiscuous mode [ 549.142542] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 549.162847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 549.229707] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 549.237128] team0: Port device team_slave_0 added [ 549.245034] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 549.253659] team0: Port device team_slave_1 added [ 549.261820] chnl_net:caif_netlink_parms(): no params data found [ 549.276892] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 549.289068] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 549.343265] device hsr_slave_0 entered promiscuous mode [ 549.390870] device hsr_slave_1 entered promiscuous mode [ 549.476276] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 549.487998] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 549.497512] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.504154] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.514063] device bridge_slave_0 entered promiscuous mode [ 549.521938] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.528637] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.536652] device bridge_slave_1 entered promiscuous mode [ 549.559441] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 549.569541] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 549.597621] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 549.609589] team0: Port device team_slave_0 added [ 549.615946] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 549.623489] team0: Port device team_slave_1 added [ 549.630187] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 549.641238] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 549.662577] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.669230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.676396] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.683041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.734856] device hsr_slave_0 entered promiscuous mode [ 549.790794] device hsr_slave_1 entered promiscuous mode [ 549.851286] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 549.859036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 549.885821] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.892624] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.899661] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.906398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.951354] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 549.957931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.968197] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 549.985796] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 549.992700] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.999367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.007386] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.014649] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.022333] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 550.030895] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.038188] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.049918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 550.058725] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.067249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.075500] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.082413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.091032] device bridge_slave_1 left promiscuous mode [ 550.097524] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.141056] device bridge_slave_0 left promiscuous mode [ 550.146622] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.257098] device hsr_slave_1 left promiscuous mode [ 550.293166] device hsr_slave_0 left promiscuous mode [ 550.345741] team0 (unregistering): Port device team_slave_1 removed [ 550.355911] team0 (unregistering): Port device team_slave_0 removed [ 550.366734] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 550.394606] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 550.454093] bond0 (unregistering): Released all slaves [ 550.516126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.524755] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 550.532099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.541097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.549194] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.556187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.567766] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 550.575593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 550.585348] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 550.594127] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.603018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 550.613584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 550.623173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 550.631366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 550.639757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 550.652547] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 550.662321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 550.669822] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 550.677351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 550.685370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 550.693875] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 550.761879] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 550.768168] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.780722] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 550.789459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 550.801520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 550.809231] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 550.817650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 550.826095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 550.835396] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.841836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.851083] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 550.859717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 550.868138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 550.879111] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 550.886041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 550.896109] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 550.904613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 550.913996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 550.921884] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.928817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.946742] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 550.963574] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 550.977056] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 550.988236] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 551.003387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 551.015528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.024218] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.036119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 551.051082] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 551.067287] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 551.076845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.089578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 551.098949] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 551.123881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 551.143002] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 551.157526] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 551.169019] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 551.188656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 551.199317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 551.222850] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 551.236947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 551.255574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 551.269629] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 551.288305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 551.317836] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 551.329941] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 551.355333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 551.371468] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 551.388224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.620125] protocol 88fb is buggy, dev hsr_slave_0 [ 551.625286] protocol 88fb is buggy, dev hsr_slave_1 [ 551.680176] protocol 88fb is buggy, dev hsr_slave_0 [ 551.685804] protocol 88fb is buggy, dev hsr_slave_1 [ 551.740235] protocol 88fb is buggy, dev hsr_slave_0 [ 551.745760] protocol 88fb is buggy, dev hsr_slave_1 18:20:50 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x86bc7e9354451d81, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f00000000c0)=@generic={0x0, 0x3, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x6cb3210000000000, 0x0, 0x0, 0x0, 0x74}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0x100b0, &(0x7f000000cf3d)=""/195}, 0x48) 18:20:50 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 552.630485] protocol 88fb is buggy, dev hsr_slave_0 [ 552.635971] protocol 88fb is buggy, dev hsr_slave_1 [ 553.110197] protocol 88fb is buggy, dev hsr_slave_0 [ 553.115982] protocol 88fb is buggy, dev hsr_slave_1 18:20:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:51 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x669, 0x0, 0x0, 0x0, 0x0, 0xabc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000002940)='\'\xc4\'\v\xec\xe4\t\xc5r\x12-\x90\xda\x9a\x94\x02\xec\xea\x10\x90\x03\xcb\xf8\x1b6\xa5(\xd6\xd3\x93\xd3\xdf\x85P\x19G7Q\v\xdcHv~Qa\xf3\xd4\xfc(\x83\xfb\xf8C\xf6\x8a$\xb1\x90\xeb\'~\xa0\xd8\xc8\xe8\x94#\xcd\xd5Kp\xbf\xc0\x8d7\x1b?A(\xe8^\x9c\xff\x0f\x1ck\xbc\x95\x05\xcd\x17\xf7\x15o\xd4\xdc4\x84uw\xa6w\x0f\xea`1\xec\xb4\x04\xd5\r\x8d\xde\x1f]\x15\xe5\xe8\xd00\xe5\x8d\x9c\x9ec+\x02\x1d\xffa5\x94\xab\xddNe\xfe\x8c\xc4q\xbb#f\xc1\xb9\x81W\xa4$)!\v\x9b\xa7\b\x91\xe5\xeb\x88\x1c\x0f\xb2.Tr\xe4\x99\x9e\x03\xb4\xd2\xf9KW\xce\xd1cC\xd5\xcf\x97\xa9\xeab\xda\xd6:\xa91q\xf7\xc5\xc0C\xd1\'\x89\xee\x84T:\x88x\xe2\x83\xf2r\xf4&t@\x9e\xa4qf\xdf\xf4\xb5\x01\\a\x85\xd3\xe0\xb7\n\xe7\xed\x84Q\xd7s\xcd4B\xcbQ\xa4\x9f[\x99\xdfJ%\xa8\xfc\xe3`\xc1JA\xc9\xbc\xd4~}\xce\xe8\xfejH\x8fb\xdd\xbcJ\vk\'\xe7Q\xfd\xaaA`\xb5\xa1\xe4\xf8\x9eG\xcfb\xe8@\x04\xe1\xf8\xacU)(S\xed\xffA\xfaqt\xb6-\x9b5\xf6\x1e\x13$e\n\xc7\x9b\xb0X\xb6\xd4\t\x99^^\xc2>J\x16\xd0\x8c\xecy*\xa0\a\xe9Ar\xa6\xb4n9j\xe5\xba\x8a\n\xce2\xcf_\x1b.t)\x8d09A[-\xf6\xe7\xe8\x1f\x92>\xb8\xd4>-\xacY\x9e\x88\x96\xa7\xfa\xdaoL\xa6\xec\xe8\xd5\xbfaf\xd7\xfc\x03\x91w)\xcd\x1f\xbe\xc9R\xcfz\x03\xec\br\x83\x8bM-\xf8X\xfd\"\xb4RV\x7f\xda\xd3\xd4h\x1c\xdb\xbe\xa4U\xec\xcd\'\xbc\xd22\x85{,\xe6-,6\x9d\x85\xb4fL\b\x98\xe9@\xee\xc2.\xb3\xd6w\x10\x94\xb5%D\xe8\r\xfe\x98G\x82\fx,\xa2J\x12\x03ec\xd5e-\x1f6\xe7\xb6\xd9\xcf0J\xed\xb7\x9b\xfd\xfc\x00EQ\x1f\x00D\xc95\xdeG +\x1bp\xf4\t\x94\x87\xf1ZbO\xa6\xe9\f`u\xda\xb3\x1d\xf9\x94\x80\xc1\x17\xde(_\xa7\xe7\x11\x9a\xac\x8c\xb1\xd71\xc5\xe9\xd3n\xc2\xa4\x98P\x9aF\xc2\x93\xad@\xa9h\x96\x1b]2\x88\xf3\xd8\xc798\x8c\x9f\xd4W4\xf1}\aD\xa0\xd8\xda\xf4\x1bEx(t|\xf4Y\xfaJ\xc2GS\xc9R\xb5\xda\xa8\x9b\xaa\x01\xe2~\xd8f.#\x94\xbf\x85z\xbf\xa0x62L\x1f\x91\xd2\x1e%\x88\x1f\f\xabb\x8ds\x93\x9e\xed\xd2\xdb\x02\x0e\xcf\xf5\xaf\xc8>+\x03e\xb7\xba\xb9}\xca\xfc\xe8\xed\x9b\xa2\x9ey\bMv\x8f\x8a8\xfd;\x9a5J\xee\x9a\xae\x83>$\x8a6\x05P\x8c\x05\xb8\r\xcf\xdd\x15/\xa9\xa1\xd4\x87{\xc9I4\xe3 i\xa4\xc5\xe5l\x03?\xfdM&\xc0a9}h\x8ef\x10!\xf0\x99\x80\xb72\xcc\x06\'+\xf0\xa1\a\xeeSGH\x12\x068S7s\xd3\xdaT\"\xa9jk\xed\xa2IyM\xa3&t\xfeA\xa9\"\xb4\xec\xdex\x00\x80`p\x91\x84\xbfK\xb6\x00\xa7\xa2\x06\xce\xc8X\x7f\xd1@\xf1\xcf\xdf\xae\xdb\r\xf6h\xdf\xc6+\xac\r\x9f\xc2D\xdf\xd6\xde`\xa4\xd1=\x1b\x8d\xf4\xbe#\tH\x06;a(`\xdcw\x1dc_\v\x046j\xf9`\r\xc0\a\x8d\x12:l\xc7j3E\xd7\xcaX\x97\xad\x93\xea\x99\xca\xd7m\xb8\x1e1\xb6Nz\"U/\x0eP\b=\x01W\xcd\xf1x\x85\xf4&\xe7\xf9W\x06\xa4\xf8&\xbc\xf4\xd0\xd2\xd1W\xee\x9a\xdd\xdbu\x0e\x9aV\xe2\xc5\x84`Bu\x12\xa8/=\x17\xc4F\x11\xdfm-)\xd9hc\xba\xb7\x91\xd9\x11\x9a,\x19\xf4]\xa7Y@B\x1f') madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3e) getxattr(0x0, 0x0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.opaque\x00', &(0x7f0000000140)='y\x00', 0x2, 0x5) r3 = dup(r2) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000340)=r3) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000000)={{0x40, 0xd7}, 'port1\x00', 0x8, 0x0, 0x9, 0x3, 0x2, 0x80000000, 0x7, 0x0, 0x0, 0x6}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000340)=r6) r7 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x7, 0x80) ioctl$KDGETLED(r7, 0x4b31, &(0x7f0000000200)) ioctl(r4, 0xfff, &(0x7f0000000180)="639c1d00312250e13d7aa9b3aad0") 18:20:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:51 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:51 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:51 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 553.320539] device bridge_slave_1 left promiscuous mode [ 553.326350] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.408324] device bridge_slave_0 left promiscuous mode [ 553.433389] bridge0: port 1(bridge_slave_0) entered disabled state 18:20:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:51 executing program 0: r0 = socket(0x2, 0x2, 0x0) r1 = dup(r0) connect$unix(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="820296feffffffffffff"], 0x10) setsockopt$inet_opts(r1, 0x0, 0x20000000000001, &(0x7f0000000080)="01061801010000b811783b26b0000000000000000000000000000001", 0x1c) write(r1, &(0x7f0000000140)="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", 0x57d) 18:20:51 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) [ 553.854107] device hsr_slave_1 left promiscuous mode [ 553.896311] device hsr_slave_0 left promiscuous mode [ 553.967167] team0 (unregistering): Port device team_slave_1 removed [ 553.992999] team0 (unregistering): Port device team_slave_0 removed [ 554.018393] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 554.084202] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 554.252460] bond0 (unregistering): Released all slaves 18:20:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:52 executing program 0: r0 = socket(0x2, 0x1, 0x0) r1 = dup(r0) listen(r1, 0x0) 18:20:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) [ 556.001553] IPVS: ftp: loaded support on port[0] = 21 [ 557.012544] chnl_net:caif_netlink_parms(): no params data found [ 557.057770] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.065541] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.076315] device bridge_slave_0 entered promiscuous mode [ 557.085604] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.094942] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.103066] device bridge_slave_1 entered promiscuous mode [ 557.126553] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 557.139125] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 557.160155] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 557.167864] team0: Port device team_slave_0 added [ 557.174259] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 557.181916] team0: Port device team_slave_1 added [ 557.194164] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 557.202122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 557.244180] device hsr_slave_0 entered promiscuous mode [ 557.292678] device hsr_slave_1 entered promiscuous mode [ 557.356051] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 557.364054] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 557.380318] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.387070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.394168] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.400599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.438272] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 557.445123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.457640] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 557.467577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 557.475460] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.483093] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.497518] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 557.504114] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.514579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 557.522499] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.529245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.551608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 557.559402] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.565823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.574668] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 557.582903] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 557.590758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.598913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 557.612471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 557.623231] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 557.629442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.638029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.655069] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 557.667557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.675771] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.691067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.000635] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 558.151195] device bridge_slave_1 left promiscuous mode [ 558.157001] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.211603] device bridge_slave_0 left promiscuous mode [ 558.217191] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.271371] device bridge_slave_1 left promiscuous mode [ 558.278205] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.349477] device bridge_slave_0 left promiscuous mode [ 558.357660] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.572120] device hsr_slave_1 left promiscuous mode [ 558.613435] device hsr_slave_0 left promiscuous mode [ 558.653498] team0 (unregistering): Port device team_slave_1 removed [ 558.666181] team0 (unregistering): Port device team_slave_0 removed [ 558.676545] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 558.726367] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 558.806117] bond0 (unregistering): Released all slaves [ 558.922965] device hsr_slave_1 left promiscuous mode [ 558.953055] device hsr_slave_0 left promiscuous mode [ 558.993009] team0 (unregistering): Port device team_slave_1 removed [ 559.004187] team0 (unregistering): Port device team_slave_0 removed [ 559.014389] bond0 (unregistering): Releasing backup interface bond_slave_1 18:20:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:57 executing program 1: r0 = socket(0x10, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)="1c0000001a009b8a14e5f40700000000", 0xd4) [ 559.064572] bond0 (unregistering): Releasing backup interface bond_slave_0 18:20:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xbca, 0x4) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 18:20:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) [ 559.182537] bond0 (unregistering): Released all slaves [ 559.197164] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! 18:20:57 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:20:57 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:20:57 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:20:57 executing program 0: r0 = msgget(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/9) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/102395) r1 = msgget(0x0, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/102395) msgctl$IPC_RMID(r1, 0x0) msgsnd(0x0, &(0x7f0000019040)=ANY=[@ANYBLOB="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"], 0x1008, 0x800) 18:20:57 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001180), 0x4) [ 562.320932] IPVS: ftp: loaded support on port[0] = 21 [ 563.234215] IPVS: ftp: loaded support on port[0] = 21 [ 563.307728] chnl_net:caif_netlink_parms(): no params data found [ 563.354825] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.361727] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.369256] device bridge_slave_0 entered promiscuous mode [ 563.377406] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.384127] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.391333] device bridge_slave_1 entered promiscuous mode [ 563.423048] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 563.459530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 563.500416] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 563.508433] team0: Port device team_slave_0 added [ 563.518988] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 563.527698] team0: Port device team_slave_1 added [ 563.533137] chnl_net:caif_netlink_parms(): no params data found [ 563.543085] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 563.554668] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 563.612857] device hsr_slave_0 entered promiscuous mode [ 563.650641] device hsr_slave_1 entered promiscuous mode [ 563.705419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 563.717008] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 563.728198] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.735287] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.743192] device bridge_slave_0 entered promiscuous mode [ 563.751073] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.757576] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.765350] device bridge_slave_1 entered promiscuous mode [ 563.791170] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 563.800777] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 563.816646] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.823156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.830180] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.837040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.858249] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 563.865837] team0: Port device team_slave_0 added [ 563.872182] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 563.879577] team0: Port device team_slave_1 added [ 563.886070] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 563.899167] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 563.973453] device hsr_slave_0 entered promiscuous mode [ 564.010664] device hsr_slave_1 entered promiscuous mode [ 564.055213] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 564.064672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 564.085663] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.092612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.100354] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.107074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.137438] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 564.145484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.155178] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 564.166179] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.173687] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.181058] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.189175] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.196236] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.208955] device bridge_slave_1 left promiscuous mode [ 564.215200] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.261181] device bridge_slave_0 left promiscuous mode [ 564.266868] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.375502] device hsr_slave_1 left promiscuous mode [ 564.422921] device hsr_slave_0 left promiscuous mode [ 564.463118] team0 (unregistering): Port device team_slave_1 removed [ 564.474608] team0 (unregistering): Port device team_slave_0 removed [ 564.484565] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 564.523941] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 564.583502] bond0 (unregistering): Released all slaves [ 564.663945] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 564.672597] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.680767] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 564.697593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.705930] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 564.717546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.725727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.734304] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.740772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.752193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 564.762006] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 564.768741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.777770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.786331] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.792886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.802822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 564.812819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 564.819142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 564.827203] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.835166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.844914] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 564.851951] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.860836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 564.870736] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 564.878703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 564.887955] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.897283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.905361] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.911972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.922204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 564.930662] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 564.938555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 564.947985] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 564.962678] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 564.972987] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 564.984282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 564.993132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.001805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.009850] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.017211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.024386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.033402] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.041997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.049906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.059970] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 565.069280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.079039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 565.110997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.118889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.127955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 565.137535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.146803] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 565.153783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.166427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 565.181704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.200673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.209455] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.219334] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 565.227953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.236868] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.249533] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 565.265701] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 565.273927] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 565.288036] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.295500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 565.306637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.315016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.332519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 565.342043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.351636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.359669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.379690] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 565.386484] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.421972] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 565.431380] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 565.437830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 565.450342] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 565.465266] 8021q: adding VLAN 0 to HW filter on device batadv0 18:21:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0xbca, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) 18:21:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:21:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:05 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:05 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x4b48, &(0x7f00000000c0)) 18:21:05 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:21:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)) 18:21:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 567.774168] Bluetooth: hci0: Frame reassembly failed (-84) 18:21:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) semctl$IPC_RMID(0x0, 0x0, 0x0) 18:21:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:06 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 568.530261] device bridge_slave_1 left promiscuous mode [ 568.535962] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.600937] device bridge_slave_0 left promiscuous mode [ 568.607875] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.772653] device hsr_slave_1 left promiscuous mode [ 568.813449] device hsr_slave_0 left promiscuous mode [ 568.873490] team0 (unregistering): Port device team_slave_1 removed [ 568.894539] team0 (unregistering): Port device team_slave_0 removed [ 568.921891] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 568.974281] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 569.055588] bond0 (unregistering): Released all slaves 18:21:07 executing program 0: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x252a, 0x925, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setuid(0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 18:21:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x44) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) dup(0xffffffffffffffff) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0a3f639788559df05158"], 0xa) fallocate(r1, 0x3, 0x0, 0x8020003) lseek(r1, 0x0, 0x3) [ 569.830570] Bluetooth: hci0 command 0x1003 tx timeout [ 569.836828] Bluetooth: hci0 sending frame failed (-49) [ 570.911670] IPVS: ftp: loaded support on port[0] = 21 [ 571.781610] IPVS: ftp: loaded support on port[0] = 21 [ 571.798727] chnl_net:caif_netlink_parms(): no params data found [ 571.862239] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.868973] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.876262] device bridge_slave_0 entered promiscuous mode [ 571.887804] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.894361] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.901985] device bridge_slave_1 entered promiscuous mode [ 571.910578] Bluetooth: hci0 command 0x1001 tx timeout [ 571.915992] Bluetooth: hci0 sending frame failed (-49) [ 571.959150] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 571.969877] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 572.009237] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 572.018267] team0: Port device team_slave_0 added [ 572.024167] chnl_net:caif_netlink_parms(): no params data found [ 572.035476] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 572.043750] team0: Port device team_slave_1 added [ 572.054807] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 572.067256] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 572.134055] device hsr_slave_0 entered promiscuous mode [ 572.160475] device hsr_slave_1 entered promiscuous mode [ 572.205775] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 572.213750] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 572.231973] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.238598] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.246387] device bridge_slave_0 entered promiscuous mode [ 572.255263] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.261850] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.268907] device bridge_slave_1 entered promiscuous mode [ 572.290502] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 572.300668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 572.314620] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.321145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.327850] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.334480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.355600] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 572.363562] team0: Port device team_slave_0 added [ 572.374310] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 572.381580] team0: Port device team_slave_1 added [ 572.387549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 572.399172] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 572.464210] device hsr_slave_0 entered promiscuous mode [ 572.510575] device hsr_slave_1 entered promiscuous mode [ 572.551272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 572.559508] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 572.578143] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.584827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.591767] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.598573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.625210] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 572.632231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.643466] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 572.656198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.663788] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.671718] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.679424] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.687034] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.696815] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 572.703143] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.717171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 572.725052] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.731765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.751201] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.759415] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.765883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.774385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 572.782537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 572.791012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 572.800672] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 572.808484] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 572.819300] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 572.830796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 572.838642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 572.851591] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 572.857991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 572.871420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.882996] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 572.893253] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 572.902510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 572.910856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.920695] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 572.926873] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.934316] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 572.943087] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 572.952906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 572.959766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 572.967860] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 572.979310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 572.988753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.000535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.008515] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.015284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.022850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.030901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.038781] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.045452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.056363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.068128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 573.077048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.096027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 573.103888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 573.115984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 573.129988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 573.138870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 573.147666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 573.156816] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 573.164993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 573.175077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 573.186740] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 573.194783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 573.203353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 573.217240] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 573.225238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 573.233543] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 573.252038] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 573.262682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 573.277626] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 573.286735] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 573.293966] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 573.302021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 573.314389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.490169] net_ratelimit: 6 callbacks suppressed [ 573.490174] protocol 88fb is buggy, dev hsr_slave_0 [ 573.500678] protocol 88fb is buggy, dev hsr_slave_1 [ 573.610184] protocol 88fb is buggy, dev hsr_slave_0 [ 573.616310] protocol 88fb is buggy, dev hsr_slave_1 [ 573.730125] protocol 88fb is buggy, dev hsr_slave_0 [ 573.735434] protocol 88fb is buggy, dev hsr_slave_1 [ 573.910342] protocol 88fb is buggy, dev hsr_slave_0 [ 573.915792] protocol 88fb is buggy, dev hsr_slave_1 [ 573.921498] protocol 88fb is buggy, dev hsr_slave_0 [ 573.926588] protocol 88fb is buggy, dev hsr_slave_1 [ 573.991101] Bluetooth: hci0 command 0x1009 tx timeout 18:21:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:12 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:12 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000000000811e6403000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x13}, 0x48) [ 575.110775] device bridge_slave_1 left promiscuous mode [ 575.116514] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.160756] device bridge_slave_0 left promiscuous mode [ 575.166583] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.283625] device hsr_slave_1 left promiscuous mode [ 575.345026] device hsr_slave_0 left promiscuous mode [ 575.394533] team0 (unregistering): Port device team_slave_1 removed [ 575.408116] team0 (unregistering): Port device team_slave_0 removed [ 575.419935] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 575.464935] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 575.511666] bond0 (unregistering): Released all slaves 18:21:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:21:16 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 18:21:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x2) write$vhci(r0, &(0x7f0000000000)=@HCI_VENDOR_PKT, 0x2) 18:21:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:16 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:16 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:21:16 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 578.710122] protocol 88fb is buggy, dev hsr_slave_0 [ 578.715980] protocol 88fb is buggy, dev hsr_slave_1 18:21:17 executing program 1: setrlimit(0x8, &(0x7f0000000040)={0x7, 0x95}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000740)=[{0x0}, {&(0x7f0000000240)="afebce2a54bdc8417362a7f02358e873238a041456b84bf83da2b030b4fafbcf", 0x20}, {&(0x7f00000004c0)="aafb21fa0d568a68733a403d19fc5b044c0ac03f289ff7d30814183a4ec5aaca6da6399eed7412739106006aa6c21e7f0d3f11badfba2cb824c6b1aa14dab6127f17f4a325ec62aa0602bcd70ac60ff02e81921b950b45e9ac640cead2950b75e4f7ee580493d0821d0df06e22da0e501387420d35dd44cc1aba42fc8b477c678c847c1838ca554727c56ef751d5174af09ebc3276bc1cc312951d712cd534f54376", 0xa2}, {&(0x7f0000000580)="324172d83354fc62e712427d16a446e02a29499fbd9e3f09666e8f98162e40968970ecb12ee695c1b6a3e33db03d1d6a831669a1dc425171ac0aa507fb78cdcdd4060ada7a20cf46bc8062dc15b12bb4eb0bba44e74c307dfe19e12889283c352a65d021820649ee52884e9cf29c10a9819566e808eae440013036414dc739b10548cc23ff44113bb65a05cc2640f03fc631e4d05c6cc39064270687b8812e8b00c308a0c207762260971e544b2689d193d94b94ae4787d5f6b49d87fad6cf", 0xbf}, {&(0x7f0000000640)="a4", 0x1}], 0x5) 18:21:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000000c0)) 18:21:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, 0x0, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:17 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r1, 0x800002, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, 0x0) accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0a3f6397"], 0x4) fallocate(r1, 0x3, 0x0, 0x8020003) lseek(r1, 0x0, 0x3) 18:21:17 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580), 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 580.731489] IPVS: ftp: loaded support on port[0] = 21 [ 580.790136] Bluetooth: hci1 command 0x1003 tx timeout [ 580.795582] Bluetooth: hci1 sending frame failed (-49) [ 581.604242] chnl_net:caif_netlink_parms(): no params data found [ 581.638940] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.645924] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.653420] device bridge_slave_0 entered promiscuous mode [ 581.660611] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.667181] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.674437] device bridge_slave_1 entered promiscuous mode [ 581.691726] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 581.701421] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 581.718296] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 581.726045] team0: Port device team_slave_0 added [ 581.732350] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 581.739809] team0: Port device team_slave_1 added [ 581.746226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 581.754799] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 581.812529] device hsr_slave_0 entered promiscuous mode [ 581.850510] device hsr_slave_1 entered promiscuous mode [ 581.890816] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 581.898339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 581.913054] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.919806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.926792] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.933472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.963283] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 581.969715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.978433] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 581.987711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 581.996240] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.003379] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.014393] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 582.020868] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.029349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.037379] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.043793] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.054424] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 582.062157] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.068503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.082842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.091624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 582.101905] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 582.113125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 582.126652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 582.137606] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 582.143912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 582.151424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 582.165235] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 582.173066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 582.180692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 582.192022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.590396] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 582.870470] Bluetooth: hci1 command 0x1001 tx timeout [ 582.876312] Bluetooth: hci1 sending frame failed (-49) [ 584.850446] device bridge_slave_1 left promiscuous mode [ 584.856477] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.891318] device bridge_slave_0 left promiscuous mode [ 584.897008] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.950275] Bluetooth: hci1 command 0x1009 tx timeout [ 585.022143] device hsr_slave_1 left promiscuous mode [ 585.063758] device hsr_slave_0 left promiscuous mode [ 585.103859] team0 (unregistering): Port device team_slave_1 removed [ 585.114988] team0 (unregistering): Port device team_slave_0 removed [ 585.124621] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 585.173423] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 585.262919] bond0 (unregistering): Released all slaves 18:21:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:26 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580), 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:26 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 588.870194] protocol 88fb is buggy, dev hsr_slave_0 [ 588.875372] protocol 88fb is buggy, dev hsr_slave_1 [ 589.110132] protocol 88fb is buggy, dev hsr_slave_0 [ 589.115301] protocol 88fb is buggy, dev hsr_slave_1 18:21:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:27 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) 18:21:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580), 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{0x0}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 589.364318] Bluetooth: Unknown HCI packet type 5e [ 589.369543] Bluetooth: Unknown HCI packet type 43 [ 589.389068] Bluetooth: Unknown HCI packet type 5e [ 589.401241] Bluetooth: Unknown HCI packet type 50 18:21:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{0x0}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 589.413621] Bluetooth: Unknown HCI packet type 5e [ 589.423903] Bluetooth: Unknown HCI packet type 40 18:21:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{0x0}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:21:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:27 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:28 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0xa}], 0x1c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 590.320176] protocol 88fb is buggy, dev hsr_slave_0 [ 590.325481] protocol 88fb is buggy, dev hsr_slave_1 [ 591.192681] device bridge_slave_1 left promiscuous mode [ 591.198287] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.250744] device bridge_slave_0 left promiscuous mode [ 591.256508] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.363590] device hsr_slave_1 left promiscuous mode [ 591.403309] device hsr_slave_0 left promiscuous mode [ 591.430224] Bluetooth: hci0 command 0x1003 tx timeout [ 591.437157] Bluetooth: hci0 sending frame failed (-49) [ 591.445181] team0 (unregistering): Port device team_slave_1 removed [ 591.455723] team0 (unregistering): Port device team_slave_0 removed [ 591.466593] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 591.494938] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 591.560175] bond0 (unregistering): Released all slaves [ 593.211569] IPVS: ftp: loaded support on port[0] = 21 [ 593.520359] Bluetooth: hci0 command 0x1001 tx timeout [ 593.525840] Bluetooth: hci0 sending frame failed (-49) [ 594.001462] chnl_net:caif_netlink_parms(): no params data found [ 594.039735] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.046548] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.055091] device bridge_slave_0 entered promiscuous mode [ 594.062325] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.068974] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.076590] device bridge_slave_1 entered promiscuous mode [ 594.098055] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 594.107642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 594.129174] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 594.137527] team0: Port device team_slave_0 added [ 594.143764] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 594.151190] team0: Port device team_slave_1 added [ 594.156842] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 594.166996] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 594.212241] device hsr_slave_0 entered promiscuous mode [ 594.261202] device hsr_slave_1 entered promiscuous mode [ 594.333200] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 594.341595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 594.355905] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.363471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.370308] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.376965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.408113] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 594.415039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.423605] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 594.433858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 594.441879] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.449240] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.461875] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 594.468124] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.477054] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 594.484973] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.491497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.502099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 594.509829] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.516396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.534852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 594.544144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 594.554325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 594.567752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 594.578987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 594.589742] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 594.596820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 594.604822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 594.612630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 594.628622] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 594.636828] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 594.644362] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 594.655781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.730325] device bridge_slave_1 left promiscuous mode [ 594.736086] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.793212] device bridge_slave_0 left promiscuous mode [ 594.799924] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.930708] device hsr_slave_1 left promiscuous mode [ 595.008102] device hsr_slave_0 left promiscuous mode [ 595.047733] team0 (unregistering): Port device team_slave_1 removed [ 595.050127] protocol 88fb is buggy, dev hsr_slave_0 [ 595.059536] protocol 88fb is buggy, dev hsr_slave_1 [ 595.068746] team0 (unregistering): Port device team_slave_0 removed [ 595.079544] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 595.103901] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 595.111531] protocol 88fb is buggy, dev hsr_slave_0 [ 595.111591] protocol 88fb is buggy, dev hsr_slave_1 [ 595.173508] bond0 (unregistering): Released all slaves [ 595.210175] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 595.360340] protocol 88fb is buggy, dev hsr_slave_0 [ 595.366178] protocol 88fb is buggy, dev hsr_slave_1 [ 595.590517] Bluetooth: hci0 command 0x1009 tx timeout 18:21:34 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 597.210522] device bridge_slave_1 left promiscuous mode [ 597.216337] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.271137] device bridge_slave_0 left promiscuous mode [ 597.276895] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.432584] device hsr_slave_1 left promiscuous mode [ 597.473233] device hsr_slave_0 left promiscuous mode [ 597.533748] team0 (unregistering): Port device team_slave_1 removed [ 597.546420] team0 (unregistering): Port device team_slave_0 removed [ 597.557912] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 597.614036] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 597.690507] bond0 (unregistering): Released all slaves 18:21:37 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) 18:21:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:21:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:37 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:37 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 599.563130] Bluetooth: hci0 sending frame failed (-49) 18:21:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:38 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 601.390331] device bridge_slave_1 left promiscuous mode [ 601.396370] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.431262] device bridge_slave_0 left promiscuous mode [ 601.436997] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.533977] device hsr_slave_1 left promiscuous mode [ 601.590235] Bluetooth: hci0 command 0x1003 tx timeout [ 601.595809] Bluetooth: hci0 sending frame failed (-49) [ 601.604421] device hsr_slave_0 left promiscuous mode [ 601.663815] team0 (unregistering): Port device team_slave_1 removed [ 601.675866] team0 (unregistering): Port device team_slave_0 removed [ 601.686757] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 601.723661] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 601.785259] bond0 (unregistering): Released all slaves [ 603.522172] IPVS: ftp: loaded support on port[0] = 21 [ 603.680223] Bluetooth: hci0 command 0x1001 tx timeout [ 603.685796] Bluetooth: hci0 sending frame failed (-49) [ 604.422440] IPVS: ftp: loaded support on port[0] = 21 [ 604.494709] chnl_net:caif_netlink_parms(): no params data found [ 604.513551] IPVS: ftp: loaded support on port[0] = 21 [ 604.557911] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.565133] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.572676] device bridge_slave_0 entered promiscuous mode [ 604.581859] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.588217] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.595295] device bridge_slave_1 entered promiscuous mode [ 604.646219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 604.658578] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 604.689821] chnl_net:caif_netlink_parms(): no params data found [ 604.704102] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 604.711637] team0: Port device team_slave_0 added [ 604.720164] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 604.727839] team0: Port device team_slave_1 added [ 604.736936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 604.745489] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 604.813474] device hsr_slave_0 entered promiscuous mode [ 604.870622] device hsr_slave_1 entered promiscuous mode [ 604.915668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 604.924903] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 604.939516] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.946578] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.953848] device bridge_slave_0 entered promiscuous mode [ 604.968168] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.976517] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.983944] device bridge_slave_1 entered promiscuous mode [ 605.046690] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 605.055713] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.062221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.068970] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.075504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.088110] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 605.098942] chnl_net:caif_netlink_parms(): no params data found [ 605.128068] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 605.136034] team0: Port device team_slave_0 added [ 605.143390] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 605.151342] team0: Port device team_slave_1 added [ 605.165608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 605.178227] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 605.193241] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.199908] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.207420] device bridge_slave_0 entered promiscuous mode [ 605.224957] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.231714] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.239566] device bridge_slave_1 entered promiscuous mode [ 605.293891] device hsr_slave_0 entered promiscuous mode [ 605.330551] device hsr_slave_1 entered promiscuous mode [ 605.371305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 605.378933] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 605.393897] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 605.407090] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 605.428704] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 605.437743] team0: Port device team_slave_0 added [ 605.443953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 605.451493] team0: Port device team_slave_1 added [ 605.459690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 605.469352] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.475963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.482731] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.490090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.499010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 605.563541] device hsr_slave_0 entered promiscuous mode [ 605.620454] device hsr_slave_1 entered promiscuous mode [ 605.671278] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 605.677651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.684303] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.693044] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.700648] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 605.708382] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.715407] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.724657] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 605.735502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 605.745553] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 605.750376] Bluetooth: hci0 command 0x1009 tx timeout [ 605.757857] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 605.766417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 605.773965] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 605.783583] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 605.789954] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.807868] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 605.821260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 605.828839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 605.837124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 605.845611] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.852509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.862860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 605.873047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 605.881629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 605.889602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 605.897891] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.904897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.913001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 605.924216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 605.935557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 605.943578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 605.952728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 605.960798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 605.969255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 605.991804] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 606.005367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.012382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.023666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.033400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 606.043144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.051053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.060655] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 606.067554] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 606.077527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.085072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.093674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.103710] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 606.111790] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 606.117817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.126812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.134138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.143618] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 606.152328] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 606.158762] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.168693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 606.178702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.187109] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.194940] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.201427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.210145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 606.218914] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 606.228276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 606.237965] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 606.244280] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.250424] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.258208] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.267072] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.273689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.281377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 606.288663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 606.297840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 606.308948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.318285] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 606.328523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 606.338457] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 606.346656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 606.354703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 606.363376] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.369867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.377197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.386164] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 606.395868] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 606.406456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.413590] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.423029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 606.431125] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 606.438989] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.445733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.455650] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 606.466040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 606.476696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 606.485287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.493291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.502365] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 606.510718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 606.518875] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.527544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 606.537302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 606.545608] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.554351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.563185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 606.572026] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 606.580504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 606.589830] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 606.598991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 606.609248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.618109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.626400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.634573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 606.642521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 606.653168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 606.662284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 606.673979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.681974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.689653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 606.698659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 606.711427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 606.725346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 606.734822] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 606.743627] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 606.750644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 606.759116] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 606.777126] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 606.785118] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 606.796650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.803919] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.814017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.829898] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 606.843652] Bluetooth: hci1: Frame reassembly failed (-84) [ 606.857159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.866716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.886531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.630292] protocol 88fb is buggy, dev hsr_slave_0 [ 608.635457] protocol 88fb is buggy, dev hsr_slave_1 [ 608.880170] Bluetooth: hci1 command 0x1003 tx timeout [ 608.885613] Bluetooth: hci1 sending frame failed (-49) 18:21:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x2) [ 609.787717] Bluetooth: Unknown HCI packet type 5e [ 609.793057] Bluetooth: Unknown HCI packet type 43 [ 609.798091] Bluetooth: Unknown HCI packet type 5e [ 609.803681] Bluetooth: Unknown HCI packet type 50 [ 609.808731] Bluetooth: Unknown HCI packet type 5e [ 609.814076] Bluetooth: Unknown HCI packet type 40 [ 609.814155] device bridge_slave_1 left promiscuous mode [ 609.825444] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.871080] device bridge_slave_0 left promiscuous mode [ 609.877072] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.965557] device hsr_slave_1 left promiscuous mode [ 610.013515] device hsr_slave_0 left promiscuous mode [ 610.075002] team0 (unregistering): Port device team_slave_1 removed [ 610.085800] team0 (unregistering): Port device team_slave_0 removed [ 610.097665] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 610.134703] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 610.216634] bond0 (unregistering): Released all slaves [ 610.950177] Bluetooth: hci1 command 0x1001 tx timeout [ 610.956159] Bluetooth: hci1 sending frame failed (-49) [ 611.830169] Bluetooth: hci0 command 0x1003 tx timeout [ 611.835824] Bluetooth: hci0 sending frame failed (-49) [ 612.540360] device bridge_slave_1 left promiscuous mode [ 612.546841] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.600908] device bridge_slave_0 left promiscuous mode [ 612.606905] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.784412] device hsr_slave_1 left promiscuous mode [ 612.823249] device hsr_slave_0 left promiscuous mode [ 612.883391] team0 (unregistering): Port device team_slave_1 removed [ 612.895173] team0 (unregistering): Port device team_slave_0 removed [ 612.905908] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 612.954619] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 613.012815] bond0 (unregistering): Released all slaves [ 613.030279] Bluetooth: hci1 command 0x1009 tx timeout [ 613.910218] Bluetooth: hci0 command 0x1001 tx timeout [ 613.915769] Bluetooth: hci0 sending frame failed (-49) [ 615.990200] Bluetooth: hci0 command 0x1009 tx timeout 18:21:55 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000003, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e0000002b008163e45ae08700000301040f00000000e0fc4cc91b4dd65b2f0580cb7023072a556d1c958c000000", 0x2e}], 0x1}, 0x0) 18:21:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:55 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:55 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:21:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 18:21:55 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f0000000240)="b63db85d1e0d2100000700000006000000cc606a01000100000001000000ae21b1fd1641f5e098001afea9155518", 0x2e) 18:21:55 executing program 0: close(0xffffffffffffffff) open$dir(&(0x7f0000000280)='./file1\x00', 0x40000400000002c2, 0x0) 18:21:55 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:21:55 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x1f1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x3c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x33c) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x127) ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000280)=""/101) r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0xff00) r1 = socket(0x0, 0x3, 0x80) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000700)={0x0, 0x3}, &(0x7f0000000740)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x77, &(0x7f0000005640)={r4}, 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000380)="bd31494989a284f7dc2d27fc923249ec8d258cd4c0eef8fdda684fb8f964dfd1ffd1afdedc0d48888a1e7eee518548b4dde73bc9898cf512bc44010d672fdfe19c443504f90fcf894e3d8612a29d841caebba3dfffbf9d1c65ead05d8db79eb333e318b3edda82e8dfa41cb890fdf10db34be36c226dfb5bda9be5730da368c913b3e9ea8c9ae0bf5cc8792597bdb0816401221c447f72e622bd043b86cc6fb6929a4317aa915f0fa041873c48f495b8ef0605c0f94a07e1277af8a019", 0xbd}], 0x1, &(0x7f0000000480)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x80000001}}], 0x18, 0x200000c0}, {&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x3, @local}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000500)}, {&(0x7f0000000600)="12019efa0bc160377d853ecc9a7a08f5e4c6e057fdf262dfb96cbf81ebc4f5fba54d95fa67927de805a6b26010711636a725cdef0ce7e8", 0x37}], 0x2, 0x0, 0x0, 0x10}, {&(0x7f0000000800)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000840)="1f796a11ff32e541f1a9c8c705235594ae87f255f28e55f65db13b3ce41a2ae1f3198d385e1ad29dc6440111ce90bcb4cd84d0b70e08de913c3f53943893d14d7202a8f6ba14bc2debbe4253cb27f7870e26cc3ddeffb32a9d7b187b59d051659e068d20e0735079c76d47931bcd5e97966e501a383a193ac439fb5daf825283400e4a35c0307150828c1b9c3b1f3e84829c9c753ad9ddfd0c95fd2d073c225f7fef6f601130f10bec58036994d49c33e90cf6d344abf7746689ea3ab3227218eccf92243a82f9a24876005b27f8bfca5b8d9a0ab1f41d95a05df4d6fb87db9d1c455212fac3cc306eea00fceb6a37b0", 0xf0}, {&(0x7f0000000940)="ecd8ce1a1716d1e0ca4b52bcf4ccbf2bd60408a557c8a25d69430df76965daa10323707fbdf7a978cd841cae3a142a9585ed0bcda17ff95116247fd149f19cb73d4ce14ff523dd58f02abe99f1c43aba4e83bf2787f88a9f1a2be932bf8c59522740044530efa6d7e5b9ba3def2eafbb294cfd7d59bf8a2d72b1a659b030b980cde23cb4dd5fb3", 0x87}, {&(0x7f0000000a00)}, {&(0x7f0000000a80)="4300ef84f341c93cb9f67610b886d7a66718b3d72fc6a16232acc32d8850a67abde8bf3c00f089672e14066947cfb42b2a42e871738610c496cd308b1bd0798071e535703305393cd3d67a0eed85", 0x4e}], 0x4, &(0x7f0000000c40)=[@dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xe7a4}, @sndinfo={0x20, 0x84, 0x2, {0x20, 0x201, 0x9, 0x400, r4}}, @init={0x18, 0x84, 0x0, {0x3ff, 0xffff, 0x4, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [], @loopback}}, @authinfo={0x18, 0x84, 0x6, {0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}], 0xc8, 0x200440c1}], 0x3, 0x4008474) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x400, 0x3ff, 0x0, 0x26}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x2003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8880}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000240)) 18:21:56 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 619.631470] IPVS: ftp: loaded support on port[0] = 21 18:21:58 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:21:58 executing program 0: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) write(r0, &(0x7f0000000240)="b63db85d1e0d0200000700000006000000cc606a010000807018cebc9b97ae21b1fd1641f5e098001afea9155518", 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/62, 0x23}], 0x6) 18:21:58 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) [ 620.031564] Bluetooth: Unknown HCI packet type 5e [ 620.036579] Bluetooth: Unknown HCI packet type 43 [ 620.042532] Bluetooth: Unknown HCI packet type 5e [ 620.048252] Bluetooth: Unknown HCI packet type 50 [ 620.056795] Bluetooth: Unknown HCI packet type 5e [ 620.063103] Bluetooth: Unknown HCI packet type 40 [ 620.509613] chnl_net:caif_netlink_parms(): no params data found [ 620.517100] IPVS: ftp: loaded support on port[0] = 21 [ 620.554321] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.560939] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.567831] device bridge_slave_0 entered promiscuous mode [ 620.577453] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.584620] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.593361] device bridge_slave_1 entered promiscuous mode [ 620.619607] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 620.628948] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 620.651098] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 620.658984] team0: Port device team_slave_0 added [ 620.667555] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 620.675146] team0: Port device team_slave_1 added [ 620.681146] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 620.692737] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 620.706272] IPVS: ftp: loaded support on port[0] = 21 [ 620.773535] device hsr_slave_0 entered promiscuous mode [ 620.820463] device hsr_slave_1 entered promiscuous mode [ 620.913222] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 620.922845] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 620.955957] chnl_net:caif_netlink_parms(): no params data found [ 620.997456] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.005243] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.012605] device bridge_slave_0 entered promiscuous mode [ 621.023014] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.029507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.036306] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.043305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.053465] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.060740] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.068239] device bridge_slave_1 entered promiscuous mode [ 621.097107] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 621.112132] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 621.137315] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 621.145245] team0: Port device team_slave_0 added [ 621.180830] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 621.188091] team0: Port device team_slave_1 added [ 621.209679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 621.221992] chnl_net:caif_netlink_parms(): no params data found [ 621.231397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 621.313824] device hsr_slave_0 entered promiscuous mode [ 621.360679] device hsr_slave_1 entered promiscuous mode [ 621.414482] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 621.422289] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 621.431912] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.439082] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.446251] device bridge_slave_0 entered promiscuous mode [ 621.465714] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 621.472510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.479579] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.486630] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.494654] device bridge_slave_1 entered promiscuous mode [ 621.518093] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.525890] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.533524] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 621.545370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 621.554687] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 621.563162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 621.571297] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 621.585061] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 621.605041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 621.612381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 621.622286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 621.629776] team0: Port device team_slave_0 added [ 621.636586] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 621.646360] team0: Port device team_slave_1 added [ 621.655355] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 621.662055] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.672308] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 621.679629] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 621.688430] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 621.696472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 621.704612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 621.712824] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.720104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.743811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 621.794018] device hsr_slave_0 entered promiscuous mode [ 621.830872] device hsr_slave_1 entered promiscuous mode [ 621.890588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 621.898872] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 621.906955] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.913370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.924053] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 621.941029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 621.948284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 621.967366] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 621.976289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 621.986064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 621.999384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.013131] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 622.021972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 622.031419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 622.038625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.049793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.059044] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 622.067864] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.077710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.086036] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.094987] Bluetooth: hci0 command 0x1003 tx timeout [ 622.099263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 622.107727] Bluetooth: hci0 sending frame failed (-49) [ 622.109474] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 622.123247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.131444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.138924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.146949] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.157451] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 622.168650] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 622.175429] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.191035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.198832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.209743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 622.223005] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 622.229520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.237653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.246364] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.255600] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.262646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.275417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.284930] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 622.297160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.305912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.314021] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.320587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.330941] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 622.337291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.346523] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 622.357440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.368738] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 622.377209] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 622.389513] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 622.396987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.408296] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 622.416835] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 622.427759] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 622.435528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.443090] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.453354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.461714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.470363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.477429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.484936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.497145] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 622.503837] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.513228] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 622.525628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.535780] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 622.548683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.557327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.568998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 622.578698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.588138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.596325] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.602960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.610702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.620552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 622.628773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 622.642922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.651976] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.661032] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.667980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.675369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.683645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.694407] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 622.703384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 622.713160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.721715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.729355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.739210] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 622.749124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.758515] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 622.765370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.774997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 622.788527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.798880] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.807687] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.824309] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 622.834273] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 622.842695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 622.852572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 622.861919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 622.872578] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 622.880160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 622.887865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 622.896276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 622.903602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 622.913118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 622.924929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.931799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 622.939517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 622.948886] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 622.960241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.997183] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 623.006530] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 623.014509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 623.022085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 623.035161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.190184] protocol 88fb is buggy, dev hsr_slave_0 [ 623.195838] protocol 88fb is buggy, dev hsr_slave_1 [ 623.200115] protocol 88fb is buggy, dev hsr_slave_0 [ 623.206212] protocol 88fb is buggy, dev hsr_slave_1 [ 623.220222] protocol 88fb is buggy, dev hsr_slave_0 [ 623.225599] protocol 88fb is buggy, dev hsr_slave_1 [ 623.320159] protocol 88fb is buggy, dev hsr_slave_0 [ 623.326023] protocol 88fb is buggy, dev hsr_slave_1 [ 623.440150] protocol 88fb is buggy, dev hsr_slave_0 [ 623.445398] protocol 88fb is buggy, dev hsr_slave_1 18:22:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 624.150622] Bluetooth: hci0 command 0x1001 tx timeout [ 624.155975] Bluetooth: hci0 sending frame failed (-49) [ 624.810483] device bridge_slave_1 left promiscuous mode [ 624.816452] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.860769] device bridge_slave_0 left promiscuous mode [ 624.866691] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.984059] device hsr_slave_1 left promiscuous mode [ 625.023950] device hsr_slave_0 left promiscuous mode 18:22:03 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:03 executing program 0: setrlimit(0x8, &(0x7f00000000c0)={0x7, 0x95}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) close(r0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000000440), 0xff52}], 0x1) write(r0, &(0x7f00000002c0)="01", 0x1) read(r1, &(0x7f0000000380)=""/223, 0xdf) readv(r1, &(0x7f0000000e80)=[{&(0x7f0000000100)=""/180, 0xb4}], 0x1) 18:22:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:03 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='\n'], 0x1) fallocate(r0, 0x3, 0x0, 0x8020003) lseek(r0, 0x0, 0x3) 18:22:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) [ 625.066829] team0 (unregistering): Port device team_slave_1 removed 18:22:03 executing program 0: socket(0x7653aa991b886c07, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) dup2(r2, r0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 625.115694] team0 (unregistering): Port device team_slave_0 removed 18:22:03 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfffffea6) [ 625.168489] bond0 (unregistering): Releasing backup interface bond_slave_1 18:22:03 executing program 0: socket(0x7653aa991b886c07, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) dup2(r2, r0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 625.248448] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 625.379504] bond0 (unregistering): Released all slaves [ 626.230345] Bluetooth: hci0 command 0x1009 tx timeout [ 627.631360] IPVS: ftp: loaded support on port[0] = 21 [ 628.453117] chnl_net:caif_netlink_parms(): no params data found [ 628.496908] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.505618] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.513521] device bridge_slave_0 entered promiscuous mode [ 628.523638] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.530280] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.537995] device bridge_slave_1 entered promiscuous mode [ 628.563132] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 628.573497] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 628.592817] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 628.600780] team0: Port device team_slave_0 added [ 628.607399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 628.615253] team0: Port device team_slave_1 added [ 628.621019] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 628.628827] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 628.684056] device hsr_slave_0 entered promiscuous mode [ 628.750534] device hsr_slave_1 entered promiscuous mode [ 628.796384] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 628.804737] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 628.818854] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.828962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.836631] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.843590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.883727] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 628.891453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.900723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 628.909696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 628.917714] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.925857] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.943351] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 628.949959] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.959618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 628.969036] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.975612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.989612] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 628.999142] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.005905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.022361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 629.036863] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 629.045686] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 629.057436] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 629.069460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 629.082012] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 629.088255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 629.096123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 629.113861] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 629.123303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 629.131140] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 629.144569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.441126] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 629.760414] device bridge_slave_1 left promiscuous mode [ 629.766273] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.821305] device bridge_slave_0 left promiscuous mode [ 629.827134] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.881639] device bridge_slave_1 left promiscuous mode [ 629.887491] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.932012] device bridge_slave_0 left promiscuous mode [ 629.937794] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.093220] device hsr_slave_1 left promiscuous mode [ 630.133455] device hsr_slave_0 left promiscuous mode [ 630.184194] team0 (unregistering): Port device team_slave_1 removed [ 630.194482] team0 (unregistering): Port device team_slave_0 removed [ 630.204960] bond0 (unregistering): Releasing backup interface bond_slave_1 18:22:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:22:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, 0x0, 0x0) 18:22:08 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x3) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 18:22:08 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 630.250131] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 630.319322] Bluetooth: Unknown HCI packet type 5e [ 630.327368] Bluetooth: Unknown HCI packet type 43 18:22:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 630.366404] Bluetooth: Unknown HCI packet type 5e [ 630.385923] Bluetooth: Unknown HCI packet type 50 [ 630.411039] Bluetooth: Unknown HCI packet type 5e [ 630.435404] Bluetooth: Unknown HCI packet type 40 [ 630.443466] bond0 (unregistering): Released all slaves 18:22:08 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, 0x0, 0x0) [ 630.470151] net_ratelimit: 6 callbacks suppressed [ 630.470157] protocol 88fb is buggy, dev hsr_slave_0 [ 630.475499] protocol 88fb is buggy, dev hsr_slave_1 [ 630.602628] device hsr_slave_1 left promiscuous mode [ 630.643790] device hsr_slave_0 left promiscuous mode [ 630.685973] team0 (unregistering): Port device team_slave_1 removed [ 630.710117] protocol 88fb is buggy, dev hsr_slave_0 [ 630.711552] team0 (unregistering): Port device team_slave_0 removed [ 630.715346] protocol 88fb is buggy, dev hsr_slave_1 [ 630.746182] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 630.808705] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 630.909005] bond0 (unregistering): Released all slaves 18:22:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 632.400191] Bluetooth: hci0 command 0x1003 tx timeout [ 632.405686] Bluetooth: hci0 sending frame failed (-49) [ 633.081552] IPVS: ftp: loaded support on port[0] = 21 [ 633.892941] IPVS: ftp: loaded support on port[0] = 21 [ 633.947871] chnl_net:caif_netlink_parms(): no params data found [ 634.002892] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.009332] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.017233] device bridge_slave_0 entered promiscuous mode [ 634.025970] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.032775] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.040096] device bridge_slave_1 entered promiscuous mode [ 634.063580] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 634.073346] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 634.098610] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 634.108253] team0: Port device team_slave_0 added [ 634.147746] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 634.156297] team0: Port device team_slave_1 added [ 634.162340] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 634.187222] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 634.243412] device hsr_slave_0 entered promiscuous mode [ 634.310400] device hsr_slave_1 entered promiscuous mode [ 634.350475] chnl_net:caif_netlink_parms(): no params data found [ 634.359019] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 634.373162] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 634.393859] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.400264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.407163] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.413559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.446690] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.453606] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.462440] device bridge_slave_0 entered promiscuous mode [ 634.475027] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.481536] Bluetooth: hci0 command 0x1001 tx timeout [ 634.485048] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.486789] Bluetooth: hci0 sending frame failed (-49) [ 634.499356] device bridge_slave_1 entered promiscuous mode [ 634.529739] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 634.539715] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 634.565608] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 634.573006] team0: Port device team_slave_0 added [ 634.578957] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 634.586491] team0: Port device team_slave_1 added [ 634.592898] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 634.606937] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 634.626780] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 634.633699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.653933] device hsr_slave_0 entered promiscuous mode [ 634.690473] device hsr_slave_1 entered promiscuous mode [ 634.735311] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 634.743759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 634.751696] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 634.763478] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 634.769879] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.776697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 634.784353] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.802489] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.820152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 634.827886] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.834566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.844050] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 634.855709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.863692] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.870398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.899421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.907341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.915455] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.925833] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 634.934110] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.941369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.958668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.967392] device bridge_slave_1 left promiscuous mode [ 634.975502] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.020761] device bridge_slave_0 left promiscuous mode [ 635.026499] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.134301] device hsr_slave_1 left promiscuous mode [ 635.212873] device hsr_slave_0 left promiscuous mode [ 635.253024] team0 (unregistering): Port device team_slave_1 removed [ 635.264735] team0 (unregistering): Port device team_slave_0 removed [ 635.274486] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 635.343545] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 635.400191] bond0 (unregistering): Released all slaves [ 635.445461] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 635.452009] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.460854] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 635.469261] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 635.483348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 635.492387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 635.501893] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 635.509818] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 635.516353] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.524451] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 635.591179] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 635.598964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.610899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.618384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 635.629074] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 635.638057] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 635.656603] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 635.677916] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.685140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.696573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 635.705081] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 635.716846] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.723973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.737047] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 635.748260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 635.761326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 635.769115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 635.787628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 635.802102] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 635.813326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 635.828865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 635.845560] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 635.858506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 635.866726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 635.878727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 635.888982] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 635.902691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 635.915444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 635.926188] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 635.941857] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 635.953772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.969406] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 635.969432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 635.979951] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 635.998358] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 636.003245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.043252] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.053614] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 18:22:14 executing program 1: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') readv(r0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/135, 0x87}], 0x1) 18:22:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000500)={'syz0'}, 0x4) 18:22:14 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:14 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x4, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000025e000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000002c0), 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x9, 0x401}, 0x0) syz_open_dev$dmmidi(0x0, 0xffffffff, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000006c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r1, r2) 18:22:14 executing program 1: [ 636.550229] Bluetooth: hci0 command 0x1009 tx timeout [ 637.750159] protocol 88fb is buggy, dev hsr_slave_0 [ 637.755506] protocol 88fb is buggy, dev hsr_slave_1 [ 637.920696] protocol 88fb is buggy, dev hsr_slave_0 [ 637.925988] protocol 88fb is buggy, dev hsr_slave_1 [ 638.421484] IPVS: ftp: loaded support on port[0] = 21 [ 639.238295] chnl_net:caif_netlink_parms(): no params data found [ 639.277474] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.284398] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.291572] device bridge_slave_0 entered promiscuous mode [ 639.298805] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.306766] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.314416] device bridge_slave_1 entered promiscuous mode [ 639.332718] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 639.348191] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 639.367697] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 639.376148] team0: Port device team_slave_0 added [ 639.382232] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 639.389310] team0: Port device team_slave_1 added [ 639.398510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 639.406302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 639.462739] device hsr_slave_0 entered promiscuous mode [ 639.501186] device hsr_slave_1 entered promiscuous mode [ 639.544419] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 639.552228] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 639.566524] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 639.599330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.609675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 639.618879] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 639.625755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 639.633387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 639.647819] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 639.654637] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.664238] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 639.672236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 639.680866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 639.689097] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.695832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.703874] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 639.718129] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 639.726891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 639.735750] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 639.744578] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.751006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.761156] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 639.773423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 639.783787] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 639.791170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 639.803324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 639.811010] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 639.819150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 639.827901] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 639.840584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 639.848544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 639.856798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 639.872480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 639.882621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.894239] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 639.904974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 639.913966] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 639.922711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 639.936897] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 639.945688] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 639.952248] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 639.959011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 639.971191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.980440] device bridge_slave_1 left promiscuous mode [ 639.986604] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.031159] device bridge_slave_0 left promiscuous mode [ 640.036784] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.154842] device hsr_slave_1 left promiscuous mode [ 640.193287] device hsr_slave_0 left promiscuous mode [ 640.234343] team0 (unregistering): Port device team_slave_1 removed [ 640.245708] team0 (unregistering): Port device team_slave_0 removed [ 640.256762] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 640.285153] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 640.353530] bond0 (unregistering): Released all slaves 18:22:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, 0x0) 18:22:18 executing program 0: 18:22:18 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000a0cff4)={0x4400000010, 0x0, 0x0, 0x70a0}, 0xc) getsockopt$netlink(r0, 0x10e, 0x8000000009, &(0x7f0000000000)=""/4, &(0x7f0000000080)=0xffc3) 18:22:18 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x800, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000000c0)={0x4, 0x3, 0x1}) r2 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f00000000c0)=0x5, 0x4) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0xbca, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x10) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}}, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={r5, 0x3, 0x30}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r6, 0x4) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/140, &(0x7f0000000000)=0x8c) 18:22:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:18 executing program 0: r0 = open(&(0x7f0000000040)='./file0\x00', 0x60e, 0x0) mmap(&(0x7f0000000000/0x13000)=nil, 0x13000, 0x0, 0x10, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) 18:22:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x400004e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet6_opts(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="a4"], 0x1) [ 640.555673] Bluetooth: Unknown HCI packet type 5e [ 640.561496] Bluetooth: Unknown HCI packet type 43 [ 640.574633] Bluetooth: Unknown HCI packet type 5e [ 640.619897] Bluetooth: Unknown HCI packet type 50 [ 640.635591] IPVS: length: 140 != 24 [ 640.646737] Bluetooth: Unknown HCI packet type 5e [ 640.669410] Bluetooth: Unknown HCI packet type 40 18:22:18 executing program 0: socket$l2tp(0x18, 0x1, 0x1) getsockopt$packet_buf(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x0) keyctl$session_to_parent(0x12) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_SCRNMAP(r0, 0x5437, &(0x7f00000000c0)) 18:22:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 641.110151] protocol 88fb is buggy, dev hsr_slave_0 [ 641.115328] protocol 88fb is buggy, dev hsr_slave_1 [ 641.327909] IPVS: length: 140 != 24 [ 641.910131] protocol 88fb is buggy, dev hsr_slave_0 [ 641.915588] protocol 88fb is buggy, dev hsr_slave_1 [ 642.070167] protocol 88fb is buggy, dev hsr_slave_0 [ 642.076061] protocol 88fb is buggy, dev hsr_slave_1 18:22:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:20 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r8, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:20 executing program 2 (fault-call:8 fault-nth:0): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 642.393544] FAULT_INJECTION: forcing a failure. [ 642.393544] name failslab, interval 1, probability 0, space 0, times 0 [ 642.407438] CPU: 0 PID: 20728 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 642.415936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.425897] Call Trace: [ 642.428516] dump_stack+0x142/0x197 [ 642.432175] should_fail.cold+0x10f/0x159 [ 642.436545] should_failslab+0xdb/0x130 [ 642.440639] kmem_cache_alloc+0x2d7/0x780 [ 642.445042] ? check_preemption_disabled+0x3c/0x250 [ 642.450266] ext4_init_io_end+0x27/0x100 [ 642.454324] ext4_writepages+0x1037/0x2fd0 [ 642.459152] ? perf_swevent_put_recursion_context+0x1f/0xa0 [ 642.465222] ? perf_tp_event+0x3f0/0x7d0 [ 642.469553] ? check_preemption_disabled+0x3c/0x250 [ 642.475210] ? ext4_mark_inode_dirty+0x860/0x860 [ 642.480006] ? wbc_attach_and_unlock_inode+0x4c0/0x8f0 [ 642.489319] ? find_held_lock+0x35/0x130 [ 642.493410] ? ext4_mark_inode_dirty+0x860/0x860 [ 642.498199] do_writepages+0xd0/0x250 [ 642.502034] ? do_writepages+0xd0/0x250 [ 642.506316] ? page_writeback_cpu_online+0x20/0x20 [ 642.511264] ? do_raw_spin_unlock+0x16b/0x260 [ 642.516145] ? _raw_spin_unlock+0x2d/0x50 [ 642.520415] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 642.526318] __filemap_fdatawrite_range+0x24e/0x320 [ 642.531783] ? replace_page_cache_page+0x700/0x700 [ 642.536753] filemap_write_and_wait_range+0x3e/0xa0 [ 642.541902] generic_file_direct_write+0x333/0x430 [ 642.547090] __generic_file_write_iter+0x2bc/0x5b0 [ 642.552285] ext4_file_write_iter+0x2ac/0xe90 [ 642.556876] ? ext4_file_mmap+0x2c0/0x2c0 [ 642.561037] ? trace_hardirqs_on+0x10/0x10 [ 642.565287] ? iov_iter_init+0xaf/0x1d0 [ 642.569364] __vfs_write+0x4a7/0x6b0 [ 642.573106] ? kernel_read+0x120/0x120 [ 642.576997] ? check_preemption_disabled+0x3c/0x250 [ 642.582033] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 642.587601] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 642.592446] ? __sb_start_write+0x153/0x2f0 [ 642.596950] vfs_write+0x198/0x500 [ 642.600722] SyS_write+0xfd/0x230 [ 642.604188] ? SyS_read+0x230/0x230 [ 642.607858] ? do_syscall_64+0x53/0x640 [ 642.611952] ? SyS_read+0x230/0x230 [ 642.615867] do_syscall_64+0x1e8/0x640 [ 642.619867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 642.624742] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 642.630132] Bluetooth: hci0 command 0x1003 tx timeout [ 642.630399] RIP: 0033:0x45a6f9 [ 642.635927] Bluetooth: hci0 sending frame failed (-49) [ 642.638858] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 642.638875] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 642.638884] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 642.638892] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 642.638899] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 642.638908] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 642.950140] protocol 88fb is buggy, dev hsr_slave_0 [ 642.955330] protocol 88fb is buggy, dev hsr_slave_1 [ 643.190146] protocol 88fb is buggy, dev hsr_slave_0 [ 643.195537] protocol 88fb is buggy, dev hsr_slave_1 [ 643.381247] IPVS: ftp: loaded support on port[0] = 21 [ 644.253033] chnl_net:caif_netlink_parms(): no params data found [ 644.292727] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.299314] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.308259] device bridge_slave_0 entered promiscuous mode [ 644.315701] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.323951] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.331451] device bridge_slave_1 entered promiscuous mode [ 644.348066] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 644.357631] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 644.375605] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 644.382942] team0: Port device team_slave_0 added [ 644.388964] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 644.396731] team0: Port device team_slave_1 added [ 644.408036] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 644.416475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 644.482621] device hsr_slave_0 entered promiscuous mode [ 644.550623] device hsr_slave_1 entered promiscuous mode [ 644.595370] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 644.602920] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 644.616122] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.623057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.629982] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.636533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.667912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.677169] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 644.686335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 644.694742] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.701893] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.710422] Bluetooth: hci0 command 0x1001 tx timeout [ 644.716043] Bluetooth: hci0 sending frame failed (-49) [ 644.725401] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 644.732013] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.741520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.749146] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.755648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.764965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.774747] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.781917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.808158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 644.818862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 644.829663] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 644.836999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 644.845242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 644.853739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 644.861835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 644.875229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 644.882359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 644.894711] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 644.903999] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 644.912532] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 644.927078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.550397] device bridge_slave_1 left promiscuous mode [ 645.556534] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.611347] device bridge_slave_0 left promiscuous mode [ 645.617073] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.661143] device bridge_slave_1 left promiscuous mode [ 645.667318] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.735531] device bridge_slave_0 left promiscuous mode [ 645.745217] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.913357] device hsr_slave_1 left promiscuous mode [ 645.953117] device hsr_slave_0 left promiscuous mode [ 645.995320] team0 (unregistering): Port device team_slave_1 removed [ 646.005229] team0 (unregistering): Port device team_slave_0 removed [ 646.015627] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 646.084518] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 646.152183] bond0 (unregistering): Released all slaves [ 646.240270] protocol 88fb is buggy, dev hsr_slave_0 [ 646.245750] protocol 88fb is buggy, dev hsr_slave_1 [ 646.261989] device hsr_slave_1 left promiscuous mode [ 646.313973] device hsr_slave_0 left promiscuous mode [ 646.353934] team0 (unregistering): Port device team_slave_1 removed [ 646.365376] team0 (unregistering): Port device team_slave_0 removed [ 646.376682] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 646.425176] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 646.506650] bond0 (unregistering): Released all slaves [ 646.790540] Bluetooth: hci0 command 0x1009 tx timeout [ 650.050418] device bridge_slave_1 left promiscuous mode [ 650.056284] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.101150] device bridge_slave_0 left promiscuous mode [ 650.106775] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.141404] device bridge_slave_1 left promiscuous mode [ 650.147211] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.191508] device bridge_slave_0 left promiscuous mode [ 650.197045] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.345707] device hsr_slave_1 left promiscuous mode [ 650.393835] device hsr_slave_0 left promiscuous mode [ 650.453295] team0 (unregistering): Port device team_slave_1 removed [ 650.463838] team0 (unregistering): Port device team_slave_0 removed [ 650.473967] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 650.523711] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 650.591475] bond0 (unregistering): Released all slaves 18:22:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:22:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x53adc69e) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4008ae89, &(0x7f00000000c0)={0x7a, 0x0, [0x4b564d02, 0x3]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b000f0010000000000004140e000a001500cd5edc2976d153b4", 0x235}], 0x1}, 0x0) r6 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) dup3(r6, 0xffffffffffffffff, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) 18:22:29 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 650.728354] device hsr_slave_1 left promiscuous mode [ 650.742547] Bluetooth: Unknown HCI packet type 5e [ 650.746688] Bluetooth: Unknown HCI packet type 00 [ 650.747984] Bluetooth: Unknown HCI packet type 43 [ 650.759358] Bluetooth: Unknown HCI packet type 5e [ 650.765814] Bluetooth: Unknown HCI packet type 50 [ 650.772839] Bluetooth: Unknown HCI packet type 5e 18:22:29 executing program 2 (fault-call:8 fault-nth:1): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 650.778382] Bluetooth: Unknown HCI packet type 40 [ 650.844483] device hsr_slave_0 left promiscuous mode [ 650.855210] FAULT_INJECTION: forcing a failure. [ 650.855210] name failslab, interval 1, probability 0, space 0, times 0 [ 650.878528] CPU: 1 PID: 20758 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 650.887182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.897166] Call Trace: [ 650.899876] dump_stack+0x142/0x197 [ 650.903629] should_fail.cold+0x10f/0x159 [ 650.907934] should_failslab+0xdb/0x130 [ 650.912142] kmem_cache_alloc+0x2d7/0x780 [ 650.916961] ? ext4_release_io_end+0x121/0x180 [ 650.921712] ext4_init_io_end+0x27/0x100 [ 650.926024] ext4_writepages+0x10d6/0x2fd0 [ 650.930825] ? ima_add_template_entry.cold+0x48/0x48 [ 650.936045] ? save_trace+0x290/0x290 [ 650.939896] ? ext4_mark_inode_dirty+0x860/0x860 [ 650.944784] ? wbc_attach_and_unlock_inode+0x4c0/0x8f0 [ 650.950447] ? find_held_lock+0x35/0x130 [ 650.954555] ? ext4_mark_inode_dirty+0x860/0x860 [ 650.959519] do_writepages+0xd0/0x250 [ 650.963350] ? do_writepages+0xd0/0x250 [ 650.967572] ? page_writeback_cpu_online+0x20/0x20 [ 650.972614] ? do_raw_spin_unlock+0x16b/0x260 [ 650.977162] ? _raw_spin_unlock+0x2d/0x50 [ 650.981691] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 650.987336] __filemap_fdatawrite_range+0x24e/0x320 [ 650.992477] ? replace_page_cache_page+0x700/0x700 [ 650.997565] filemap_write_and_wait_range+0x3e/0xa0 [ 651.002905] generic_file_direct_write+0x333/0x430 [ 651.008023] __generic_file_write_iter+0x2bc/0x5b0 [ 651.012996] ext4_file_write_iter+0x2ac/0xe90 [ 651.017564] ? ext4_file_mmap+0x2c0/0x2c0 [ 651.021929] ? trace_hardirqs_on+0x10/0x10 [ 651.026309] ? iov_iter_init+0xaf/0x1d0 [ 651.030938] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 651.036070] __vfs_write+0x4a7/0x6b0 [ 651.042293] ? kernel_read+0x120/0x120 [ 651.046218] ? check_preemption_disabled+0x3c/0x250 [ 651.051273] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 651.056853] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 651.061676] ? __sb_start_write+0x153/0x2f0 [ 651.066291] vfs_write+0x198/0x500 [ 651.069873] SyS_write+0xfd/0x230 [ 651.073364] ? SyS_read+0x230/0x230 [ 651.077277] ? do_syscall_64+0x53/0x640 [ 651.081483] ? SyS_read+0x230/0x230 [ 651.085143] do_syscall_64+0x1e8/0x640 [ 651.089153] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 651.094239] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 651.100029] RIP: 0033:0x45a6f9 [ 651.103345] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.111074] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 651.118554] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 651.125943] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 651.133234] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 651.141405] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 651.173996] team0 (unregistering): Port device team_slave_1 removed [ 651.198889] team0 (unregistering): Port device team_slave_0 removed [ 651.226072] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 651.295979] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 651.420513] bond0 (unregistering): Released all slaves 18:22:29 executing program 2 (fault-call:8 fault-nth:2): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 651.581118] FAULT_INJECTION: forcing a failure. [ 651.581118] name failslab, interval 1, probability 0, space 0, times 0 [ 651.604359] CPU: 1 PID: 20762 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 651.612529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.622099] Call Trace: [ 651.624844] dump_stack+0x142/0x197 [ 651.628507] should_fail.cold+0x10f/0x159 [ 651.632686] should_failslab+0xdb/0x130 [ 651.636692] __kmalloc+0x2f0/0x7a0 [ 651.640349] ? ext4_find_extent+0x709/0x960 [ 651.644703] ext4_find_extent+0x709/0x960 [ 651.648970] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 651.654540] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 651.659563] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 651.664698] ? perf_trace_lock+0x500/0x500 [ 651.669058] ? lock_acquire+0x16f/0x430 [ 651.673141] ? ext4_map_blocks+0x829/0x17c0 [ 651.677674] ext4_map_blocks+0x881/0x17c0 [ 651.681970] ? ext4_issue_zeroout+0x160/0x160 [ 651.686635] ? __lock_is_held+0xb6/0x140 [ 651.690929] ? check_preemption_disabled+0x3c/0x250 [ 651.696066] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 651.701719] ext4_writepages+0x1afb/0x2fd0 [ 651.706166] ? perf_tp_event+0x3f0/0x7d0 [ 651.710272] ? ext4_mark_inode_dirty+0x860/0x860 [ 651.715076] ? wbc_attach_and_unlock_inode+0x4c1/0x8f0 [ 651.720887] ? find_held_lock+0x35/0x130 [ 651.724984] ? ext4_mark_inode_dirty+0x860/0x860 [ 651.729890] do_writepages+0xd0/0x250 [ 651.733748] ? do_writepages+0xd0/0x250 [ 651.737944] ? page_writeback_cpu_online+0x20/0x20 [ 651.742910] ? do_raw_spin_unlock+0x16b/0x260 [ 651.747545] ? _raw_spin_unlock+0x2d/0x50 [ 651.752027] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 651.757336] __filemap_fdatawrite_range+0x24e/0x320 [ 651.762471] ? replace_page_cache_page+0x700/0x700 [ 651.767524] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 651.773293] ? preempt_count_add+0xbc/0x1a0 [ 651.778413] filemap_write_and_wait_range+0x3e/0xa0 [ 651.783971] generic_file_direct_write+0x333/0x430 [ 651.789038] __generic_file_write_iter+0x2bc/0x5b0 [ 651.795666] ext4_file_write_iter+0x2ac/0xe90 [ 651.800381] ? ext4_file_mmap+0x2c0/0x2c0 [ 651.804943] ? trace_hardirqs_on+0x10/0x10 [ 651.809211] ? iov_iter_init+0xaf/0x1d0 [ 651.813426] __vfs_write+0x4a7/0x6b0 [ 651.817294] ? kernel_read+0x120/0x120 [ 651.821207] ? check_preemption_disabled+0x3c/0x250 [ 651.826342] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 651.831835] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 651.836743] ? __sb_start_write+0x153/0x2f0 [ 651.841098] vfs_write+0x198/0x500 [ 651.845191] SyS_write+0xfd/0x230 [ 651.848706] ? SyS_read+0x230/0x230 [ 651.852363] ? do_syscall_64+0x53/0x640 [ 651.856465] ? SyS_read+0x230/0x230 [ 651.860117] do_syscall_64+0x1e8/0x640 [ 651.864113] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 651.869004] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 651.875098] RIP: 0033:0x45a6f9 [ 651.878656] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 651.886851] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 651.894313] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 651.901688] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 651.909446] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 651.916915] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:30 executing program 2 (fault-call:8 fault-nth:3): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 652.274568] FAULT_INJECTION: forcing a failure. [ 652.274568] name failslab, interval 1, probability 0, space 0, times 0 [ 652.286441] CPU: 0 PID: 20765 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 652.294482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.304128] Call Trace: [ 652.306827] dump_stack+0x142/0x197 [ 652.310796] should_fail.cold+0x10f/0x159 [ 652.315262] should_failslab+0xdb/0x130 [ 652.319357] kmem_cache_alloc+0x2d7/0x780 [ 652.323575] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 652.329185] ext4_mb_new_blocks+0x513/0x3b30 [ 652.333807] ? ext4_find_extent+0x709/0x960 [ 652.338377] ? ext4_inode_to_goal_block+0x2ab/0x3b0 [ 652.343590] ext4_ext_map_blocks+0x26cd/0x4fa0 [ 652.348477] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 652.353534] ? perf_trace_lock+0x500/0x500 [ 652.358249] ? lock_acquire+0x16f/0x430 [ 652.362275] ext4_map_blocks+0x881/0x17c0 [ 652.366969] ? ext4_issue_zeroout+0x160/0x160 [ 652.371602] ? __lock_is_held+0xb6/0x140 [ 652.375763] ? check_preemption_disabled+0x3c/0x250 [ 652.381013] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 652.386610] ext4_writepages+0x1afb/0x2fd0 [ 652.391071] ? perf_tp_event+0x3f0/0x7d0 [ 652.395384] ? ext4_mark_inode_dirty+0x860/0x860 [ 652.400365] ? wbc_attach_and_unlock_inode+0x4c1/0x8f0 [ 652.406112] ? find_held_lock+0x35/0x130 [ 652.410406] ? ext4_mark_inode_dirty+0x860/0x860 [ 652.415388] do_writepages+0xd0/0x250 [ 652.419389] ? do_writepages+0xd0/0x250 [ 652.423526] ? page_writeback_cpu_online+0x20/0x20 [ 652.428744] ? do_raw_spin_unlock+0x16b/0x260 [ 652.433314] ? _raw_spin_unlock+0x2d/0x50 [ 652.437591] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 652.443009] __filemap_fdatawrite_range+0x24e/0x320 [ 652.448416] ? replace_page_cache_page+0x700/0x700 [ 652.455514] filemap_write_and_wait_range+0x3e/0xa0 [ 652.461044] generic_file_direct_write+0x333/0x430 [ 652.466168] __generic_file_write_iter+0x2bc/0x5b0 [ 652.471132] ext4_file_write_iter+0x2ac/0xe90 [ 652.475653] ? ext4_file_mmap+0x2c0/0x2c0 [ 652.479839] ? trace_hardirqs_on+0x10/0x10 [ 652.484489] ? iov_iter_init+0xaf/0x1d0 [ 652.488571] __vfs_write+0x4a7/0x6b0 [ 652.492526] ? kernel_read+0x120/0x120 [ 652.496462] ? check_preemption_disabled+0x3c/0x250 [ 652.501616] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 652.507240] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 652.512023] ? __sb_start_write+0x153/0x2f0 [ 652.517290] vfs_write+0x198/0x500 [ 652.520857] SyS_write+0xfd/0x230 [ 652.524330] ? SyS_read+0x230/0x230 [ 652.527999] ? do_syscall_64+0x53/0x640 [ 652.532008] ? SyS_read+0x230/0x230 [ 652.535844] do_syscall_64+0x1e8/0x640 [ 652.539887] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 652.544774] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 652.549976] RIP: 0033:0x45a6f9 [ 652.553261] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.562080] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 652.569476] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 652.576764] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 652.584140] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 652.592170] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:30 executing program 2 (fault-call:8 fault-nth:4): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 652.734988] FAULT_INJECTION: forcing a failure. [ 652.734988] name failslab, interval 1, probability 0, space 0, times 0 [ 652.746568] CPU: 0 PID: 20770 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 652.755036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.765249] Call Trace: [ 652.767870] dump_stack+0x142/0x197 [ 652.771814] should_fail.cold+0x10f/0x159 [ 652.776430] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 652.781977] should_failslab+0xdb/0x130 [ 652.787902] kmem_cache_alloc+0x47/0x780 [ 652.790147] Bluetooth: hci0 command 0x1003 tx timeout [ 652.791978] ? ext4_es_can_be_merged+0x16e/0x230 [ 652.797247] Bluetooth: hci0 sending frame failed (-49) [ 652.802126] __es_insert_extent+0x26c/0xe60 [ 652.802148] ext4_es_insert_extent+0x1f0/0x590 [ 652.802167] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 652.802200] ext4_map_blocks+0xab1/0x17c0 [ 652.802225] ? ext4_issue_zeroout+0x160/0x160 [ 652.802239] ? __lock_is_held+0xb6/0x140 [ 652.802255] ? check_preemption_disabled+0x3c/0x250 [ 652.841329] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 652.846931] ext4_writepages+0x1afb/0x2fd0 [ 652.851977] ? perf_tp_event+0x3f0/0x7d0 [ 652.856456] ? ext4_mark_inode_dirty+0x860/0x860 [ 652.861280] ? wbc_attach_and_unlock_inode+0x4c1/0x8f0 [ 652.866579] ? find_held_lock+0x35/0x130 [ 652.870662] ? ext4_mark_inode_dirty+0x860/0x860 [ 652.875455] do_writepages+0xd0/0x250 [ 652.879441] ? do_writepages+0xd0/0x250 [ 652.883573] ? page_writeback_cpu_online+0x20/0x20 [ 652.888801] ? do_raw_spin_unlock+0x16b/0x260 [ 652.893313] ? _raw_spin_unlock+0x2d/0x50 [ 652.897478] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 652.902974] __filemap_fdatawrite_range+0x24e/0x320 [ 652.908154] ? replace_page_cache_page+0x700/0x700 [ 652.913097] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 652.918578] ? preempt_count_add+0xbc/0x1a0 [ 652.922926] filemap_write_and_wait_range+0x3e/0xa0 [ 652.928113] generic_file_direct_write+0x333/0x430 [ 652.933896] __generic_file_write_iter+0x2bc/0x5b0 [ 652.939507] ext4_file_write_iter+0x2ac/0xe90 [ 652.944506] ? ext4_file_mmap+0x2c0/0x2c0 [ 652.949023] ? trace_hardirqs_on+0x10/0x10 [ 652.953351] ? iov_iter_init+0xaf/0x1d0 [ 652.957446] __vfs_write+0x4a7/0x6b0 [ 652.961384] ? kernel_read+0x120/0x120 [ 652.965293] ? check_preemption_disabled+0x3c/0x250 [ 652.970516] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 652.976070] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 652.981186] ? __sb_start_write+0x153/0x2f0 [ 652.985655] vfs_write+0x198/0x500 [ 652.989478] SyS_write+0xfd/0x230 [ 652.992926] ? SyS_read+0x230/0x230 [ 652.996749] ? do_syscall_64+0x53/0x640 [ 653.000829] ? SyS_read+0x230/0x230 [ 653.004829] do_syscall_64+0x1e8/0x640 [ 653.008731] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 653.013692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 653.019158] RIP: 0033:0x45a6f9 [ 653.022448] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.032286] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 653.039710] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 653.047471] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 653.054765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 653.062661] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:31 executing program 2 (fault-call:8 fault-nth:5): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 653.145788] FAULT_INJECTION: forcing a failure. [ 653.145788] name failslab, interval 1, probability 0, space 0, times 0 [ 653.157614] CPU: 1 PID: 20773 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 653.165607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.175273] Call Trace: [ 653.178042] dump_stack+0x142/0x197 [ 653.181756] should_fail.cold+0x10f/0x159 [ 653.185921] ? __lock_is_held+0xb6/0x140 [ 653.189991] ? mempool_free+0x1d0/0x1d0 [ 653.194456] should_failslab+0xdb/0x130 [ 653.198582] kmem_cache_alloc+0x47/0x780 [ 653.203777] ? mempool_free+0x1d0/0x1d0 [ 653.207899] mempool_alloc_slab+0x47/0x60 [ 653.212190] mempool_alloc+0x138/0x300 [ 653.216596] ? remove_element.isra.0+0x1b0/0x1b0 [ 653.221553] ? lock_downgrade+0x740/0x740 [ 653.225971] bio_alloc_bioset+0x368/0x680 [ 653.230857] ? __unlock_page_memcg+0x70/0x100 [ 653.235363] ? bvec_alloc+0x2e0/0x2e0 [ 653.239434] ext4_bio_write_page+0x77c/0xe63 [ 653.243948] mpage_submit_page+0x138/0x240 [ 653.248302] mpage_map_and_submit_buffers+0x45a/0x750 [ 653.253918] ? mpage_process_page_bufs+0x510/0x510 [ 653.259836] ? ext4_issue_zeroout+0x160/0x160 [ 653.264534] ? __lock_is_held+0xb6/0x140 [ 653.268624] ? check_preemption_disabled+0x3c/0x250 [ 653.274350] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 653.280031] ext4_writepages+0x1bb3/0x2fd0 [ 653.284594] ? ext4_mark_inode_dirty+0x860/0x860 [ 653.289366] ? wbc_attach_and_unlock_inode+0x4c1/0x8f0 [ 653.294780] ? find_held_lock+0x35/0x130 [ 653.299076] ? ext4_mark_inode_dirty+0x860/0x860 [ 653.303915] do_writepages+0xd0/0x250 [ 653.307796] ? do_writepages+0xd0/0x250 [ 653.312098] ? page_writeback_cpu_online+0x20/0x20 [ 653.317398] ? do_raw_spin_unlock+0x16b/0x260 [ 653.321990] ? _raw_spin_unlock+0x2d/0x50 [ 653.326750] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 653.332111] __filemap_fdatawrite_range+0x24e/0x320 [ 653.337265] ? replace_page_cache_page+0x700/0x700 [ 653.342287] filemap_write_and_wait_range+0x3e/0xa0 [ 653.347294] generic_file_direct_write+0x333/0x430 [ 653.352322] __generic_file_write_iter+0x2bc/0x5b0 [ 653.357483] ext4_file_write_iter+0x2ac/0xe90 [ 653.361980] ? ext4_file_mmap+0x2c0/0x2c0 [ 653.366242] ? trace_hardirqs_on+0x10/0x10 [ 653.370671] ? iov_iter_init+0xaf/0x1d0 [ 653.374844] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 653.380145] __vfs_write+0x4a7/0x6b0 [ 653.384375] ? kernel_read+0x120/0x120 [ 653.388438] ? check_preemption_disabled+0x3c/0x250 [ 653.393625] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 653.399163] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 653.404146] ? __sb_start_write+0x153/0x2f0 [ 653.408650] vfs_write+0x198/0x500 [ 653.412181] SyS_write+0xfd/0x230 [ 653.415723] ? SyS_read+0x230/0x230 [ 653.419364] ? do_syscall_64+0x53/0x640 [ 653.423589] ? SyS_read+0x230/0x230 [ 653.427320] do_syscall_64+0x1e8/0x640 [ 653.431439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 653.436574] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 653.442222] RIP: 0033:0x45a6f9 [ 653.445804] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.453971] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 653.461711] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 653.469012] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 653.477082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 653.484713] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:31 executing program 2 (fault-call:8 fault-nth:6): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 653.596647] FAULT_INJECTION: forcing a failure. [ 653.596647] name failslab, interval 1, probability 0, space 0, times 0 [ 653.623333] CPU: 1 PID: 20779 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 653.631288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.640752] Call Trace: [ 653.643384] dump_stack+0x142/0x197 [ 653.647248] should_fail.cold+0x10f/0x159 [ 653.651427] ? __lock_is_held+0xb6/0x140 [ 653.655961] ? mempool_free+0x1d0/0x1d0 [ 653.659945] should_failslab+0xdb/0x130 [ 653.664614] kmem_cache_alloc+0x47/0x780 [ 653.668711] ? mempool_free+0x1d0/0x1d0 [ 653.672682] mempool_alloc_slab+0x47/0x60 [ 653.676907] mempool_alloc+0x138/0x300 [ 653.680901] ? mempool_free+0x1d0/0x1d0 [ 653.685190] ? remove_element.isra.0+0x1b0/0x1b0 [ 653.689945] ? remove_element.isra.0+0x1b0/0x1b0 [ 653.694703] bvec_alloc+0xd1/0x2e0 [ 653.698386] bio_alloc_bioset+0x419/0x680 [ 653.702568] ? bvec_alloc+0x2e0/0x2e0 [ 653.706810] ext4_bio_write_page+0x77c/0xe63 [ 653.711234] mpage_submit_page+0x138/0x240 [ 653.715488] mpage_map_and_submit_buffers+0x45a/0x750 [ 653.720985] ? mpage_process_page_bufs+0x510/0x510 [ 653.726015] ? ext4_issue_zeroout+0x160/0x160 [ 653.730700] ? __lock_is_held+0xb6/0x140 [ 653.734845] ? check_preemption_disabled+0x3c/0x250 [ 653.739861] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 653.745872] ext4_writepages+0x1bb3/0x2fd0 [ 653.750120] ? ext4_mark_inode_dirty+0x860/0x860 [ 653.755065] ? wbc_attach_and_unlock_inode+0x4c1/0x8f0 [ 653.760367] ? find_held_lock+0x35/0x130 [ 653.764567] ? ext4_mark_inode_dirty+0x860/0x860 [ 653.769353] do_writepages+0xd0/0x250 [ 653.773187] ? do_writepages+0xd0/0x250 [ 653.777184] ? page_writeback_cpu_online+0x20/0x20 [ 653.782643] ? do_raw_spin_unlock+0x16b/0x260 [ 653.787263] ? _raw_spin_unlock+0x2d/0x50 [ 653.791526] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 653.797533] __filemap_fdatawrite_range+0x24e/0x320 [ 653.802668] ? replace_page_cache_page+0x700/0x700 [ 653.807972] filemap_write_and_wait_range+0x3e/0xa0 [ 653.813016] generic_file_direct_write+0x333/0x430 [ 653.817962] __generic_file_write_iter+0x2bc/0x5b0 [ 653.822893] ext4_file_write_iter+0x2ac/0xe90 [ 653.827485] ? ext4_file_mmap+0x2c0/0x2c0 [ 653.831803] ? trace_hardirqs_on+0x10/0x10 [ 653.836032] ? iov_iter_init+0xaf/0x1d0 [ 653.840267] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 653.845216] __vfs_write+0x4a7/0x6b0 [ 653.849014] ? kernel_read+0x120/0x120 [ 653.853417] ? check_preemption_disabled+0x3c/0x250 [ 653.858441] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 653.864607] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 653.869487] ? __sb_start_write+0x153/0x2f0 [ 653.874318] vfs_write+0x198/0x500 [ 653.878600] SyS_write+0xfd/0x230 [ 653.882075] ? SyS_read+0x230/0x230 [ 653.885703] ? do_syscall_64+0x53/0x640 [ 653.889673] ? SyS_read+0x230/0x230 [ 653.893302] do_syscall_64+0x1e8/0x640 [ 653.897578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 653.902692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 653.907973] RIP: 0033:0x45a6f9 [ 653.911156] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 653.919573] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 653.927813] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 653.935796] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 653.944190] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 653.951740] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:32 executing program 2 (fault-call:8 fault-nth:7): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 654.030844] FAULT_INJECTION: forcing a failure. [ 654.030844] name failslab, interval 1, probability 0, space 0, times 0 [ 654.043091] CPU: 1 PID: 20785 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 654.051328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.060818] Call Trace: [ 654.063654] dump_stack+0x142/0x197 [ 654.067380] should_fail.cold+0x10f/0x159 [ 654.071801] should_failslab+0xdb/0x130 [ 654.075868] kmem_cache_alloc_node+0x56/0x780 [ 654.080357] ? __lock_is_held+0xb6/0x140 [ 654.084417] create_task_io_context+0x31/0x3d0 [ 654.089131] generic_make_request_checks+0x1505/0x1ac0 [ 654.094580] ? blk_cleanup_queue+0x610/0x610 [ 654.098989] ? __brelse+0x50/0x60 [ 654.102472] ? ext4_mark_iloc_dirty+0x1720/0x2900 [ 654.107328] generic_make_request+0x7d/0xa40 [ 654.111745] ? blk_queue_enter+0x520/0x520 [ 654.116061] ? ext4_reserve_inode_write+0x122/0x240 [ 654.121083] submit_bio+0x1a5/0x3f0 [ 654.124985] ? submit_bio+0x1a5/0x3f0 [ 654.128785] ? ext4_expand_extra_isize+0x4b0/0x4b0 [ 654.133705] ? generic_make_request+0xa40/0xa40 [ 654.138462] ? lock_downgrade+0x740/0x740 [ 654.142700] ext4_io_submit+0x180/0x210 [ 654.146678] ext4_writepages+0x15e5/0x2fd0 [ 654.150925] ? ext4_mark_inode_dirty+0x860/0x860 [ 654.155688] ? wbc_attach_and_unlock_inode+0x4c0/0x8f0 [ 654.160954] ? find_held_lock+0x35/0x130 [ 654.165264] ? ext4_mark_inode_dirty+0x860/0x860 [ 654.170017] do_writepages+0xd0/0x250 [ 654.174061] ? do_writepages+0xd0/0x250 [ 654.178034] ? page_writeback_cpu_online+0x20/0x20 [ 654.182956] ? do_raw_spin_unlock+0x16b/0x260 [ 654.187444] ? _raw_spin_unlock+0x2d/0x50 [ 654.191742] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 654.197012] __filemap_fdatawrite_range+0x24e/0x320 [ 654.203767] ? replace_page_cache_page+0x700/0x700 [ 654.208697] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 654.214150] ? preempt_count_add+0xbc/0x1a0 [ 654.218484] filemap_write_and_wait_range+0x3e/0xa0 [ 654.223496] generic_file_direct_write+0x333/0x430 [ 654.228412] __generic_file_write_iter+0x2bc/0x5b0 [ 654.233332] ext4_file_write_iter+0x2ac/0xe90 [ 654.237844] ? ext4_file_mmap+0x2c0/0x2c0 [ 654.241997] ? trace_hardirqs_on+0x10/0x10 [ 654.246231] ? iov_iter_init+0xaf/0x1d0 [ 654.250196] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 654.255212] __vfs_write+0x4a7/0x6b0 [ 654.258933] ? kernel_read+0x120/0x120 [ 654.262822] ? check_preemption_disabled+0x3c/0x250 [ 654.267831] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 654.274388] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 654.279508] ? __sb_start_write+0x153/0x2f0 [ 654.283823] vfs_write+0x198/0x500 [ 654.287356] SyS_write+0xfd/0x230 [ 654.290975] ? SyS_read+0x230/0x230 [ 654.294712] ? do_syscall_64+0x53/0x640 [ 654.298675] ? SyS_read+0x230/0x230 [ 654.302296] do_syscall_64+0x1e8/0x640 [ 654.306260] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 654.311113] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 654.316455] RIP: 0033:0x45a6f9 [ 654.319674] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 654.327461] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 654.334716] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 654.341986] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 654.349345] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 654.357658] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 654.870226] Bluetooth: hci0 command 0x1001 tx timeout [ 654.875999] Bluetooth: hci0 sending frame failed (-49) [ 655.601033] IPVS: ftp: loaded support on port[0] = 21 [ 656.396424] chnl_net:caif_netlink_parms(): no params data found [ 656.404694] IPVS: ftp: loaded support on port[0] = 21 [ 656.437502] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.444993] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.452872] device bridge_slave_0 entered promiscuous mode [ 656.463003] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.469551] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.476995] device bridge_slave_1 entered promiscuous mode [ 656.493668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 656.503483] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 656.525925] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 656.533750] team0: Port device team_slave_0 added [ 656.546579] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 656.554307] team0: Port device team_slave_1 added [ 656.561246] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 656.571584] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 656.603127] IPVS: ftp: loaded support on port[0] = 21 [ 656.653656] device hsr_slave_0 entered promiscuous mode [ 656.700472] device hsr_slave_1 entered promiscuous mode [ 656.748682] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 656.758913] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 656.826754] chnl_net:caif_netlink_parms(): no params data found [ 656.849985] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.856962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.864340] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.870876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.899682] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.907003] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.916291] device bridge_slave_0 entered promiscuous mode [ 656.924182] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.931196] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.938798] device bridge_slave_1 entered promiscuous mode [ 656.939511] IPVS: ftp: loaded support on port[0] = 21 [ 656.953285] Bluetooth: hci0 command 0x1009 tx timeout [ 656.978826] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 656.997419] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 657.029978] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 657.039232] team0: Port device team_slave_0 added [ 657.054663] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 657.063837] team0: Port device team_slave_1 added [ 657.104597] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 657.113573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 657.143336] chnl_net:caif_netlink_parms(): no params data found [ 657.184202] device hsr_slave_0 entered promiscuous mode [ 657.250568] device hsr_slave_1 entered promiscuous mode [ 657.301239] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 657.318309] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 657.372852] chnl_net:caif_netlink_parms(): no params data found [ 657.408142] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.415969] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.423644] device bridge_slave_0 entered promiscuous mode [ 657.435847] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.443503] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.453761] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.461177] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.468447] device bridge_slave_1 entered promiscuous mode [ 657.479069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.489202] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 657.514940] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 657.529861] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 657.538665] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.545697] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.553494] device bridge_slave_0 entered promiscuous mode [ 657.561785] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.568406] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.575917] device bridge_slave_1 entered promiscuous mode [ 657.588453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 657.596816] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 657.606373] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 657.615626] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.628876] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 657.639189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 657.655570] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 657.666712] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 657.675421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 657.684102] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.690512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.699499] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 657.709115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 657.739232] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 657.749860] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 657.758201] team0: Port device team_slave_0 added [ 657.769887] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 657.779341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 657.787601] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.794026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.812592] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 657.819837] team0: Port device team_slave_1 added [ 657.825728] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 657.833751] team0: Port device team_slave_0 added [ 657.840706] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 657.848333] team0: Port device team_slave_1 added [ 657.854883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 657.862911] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 657.870866] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 657.885341] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 657.894931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 657.909460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 657.926463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 657.973541] device hsr_slave_0 entered promiscuous mode [ 658.010608] device hsr_slave_1 entered promiscuous mode [ 658.071324] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 658.084522] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 658.093886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.102092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.112440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 658.172568] device hsr_slave_0 entered promiscuous mode [ 658.210655] device hsr_slave_1 entered promiscuous mode [ 658.254569] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 658.262798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.271366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.282025] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.290128] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 658.304677] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 658.313498] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 658.323355] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 658.334611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.343887] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.361535] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 658.369481] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 658.384214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.392971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.400786] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.408381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.418442] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 658.425062] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.438261] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 658.447840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 658.455713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 658.464102] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 658.472368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.481060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.488839] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.495625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.505730] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.513801] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 658.523111] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 658.529314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 658.547851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.557719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 658.569672] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 658.576315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.586436] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.594912] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.601922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.613721] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 658.627805] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 658.634898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.643771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 658.651355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 658.658888] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 658.668295] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 658.676718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 658.685842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 658.693783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 658.700735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.711492] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 658.718029] 8021q: adding VLAN 0 to HW filter on device team0 [ 658.732060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 658.744220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 658.753284] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 658.762357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.771246] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 658.779314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 658.787850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 658.796295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 658.804533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 658.813740] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.820246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.827974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 658.835153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 658.845386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.859412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 658.869840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 658.877766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 658.887174] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 658.896152] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.903139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.911069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 658.919600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 658.933210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 658.944985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.959211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.968085] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 658.979944] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 658.991664] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 659.000578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.008279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.016182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.024707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.033324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.042905] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 659.049136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.061463] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 659.072645] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 659.079288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.087091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.094275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.119970] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 659.133387] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 659.139797] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.146684] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.155829] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.172651] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 659.183113] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 659.194449] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 659.202829] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.209625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 659.217499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.226013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.233939] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.240812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.256227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.271111] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 659.278570] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.290469] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.298196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.308336] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 659.318488] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 659.327818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.339858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.348418] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.355206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.362807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.370771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.380999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 659.396434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.418201] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 659.426661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.490143] protocol 88fb is buggy, dev hsr_slave_0 [ 659.495885] protocol 88fb is buggy, dev hsr_slave_1 [ 659.551854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 659.568084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.580129] protocol 88fb is buggy, dev hsr_slave_0 [ 659.582537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 659.585338] protocol 88fb is buggy, dev hsr_slave_1 [ 659.595650] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 659.609639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.620131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.629157] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.662385] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.670282] protocol 88fb is buggy, dev hsr_slave_0 [ 659.675657] protocol 88fb is buggy, dev hsr_slave_1 [ 659.689302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 659.700198] protocol 88fb is buggy, dev hsr_slave_0 [ 659.705372] protocol 88fb is buggy, dev hsr_slave_1 [ 659.714332] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.721941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.729918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.740773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 659.753373] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 659.762720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.772773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.786803] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 659.795517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 659.812380] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 659.821428] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.829078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 659.830205] protocol 88fb is buggy, dev hsr_slave_0 [ 659.836678] protocol 88fb is buggy, dev hsr_slave_0 [ 659.861639] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 659.869443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.879524] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 659.891952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 659.901667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 659.919358] 8021q: adding VLAN 0 to HW filter on device batadv0 18:22:39 executing program 0: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x2000000000000074, 0x4) msgget(0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\r\x17`s\xec\x85>\xcf\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xca\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\xcfi\x90\xd7\xd3H\xa1\xb4\xda\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\xde\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\x95!\xea\x11\xda\xe1I\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|', 0x2761, 0x0) write$cgroup_pid(r0, &(0x7f0000000080), 0xfffffe38) syz_open_procfs(0x0, &(0x7f0000000440)='syscall\x00.\xc9\xe8\xbe\f0\x14\x8c{\xe9\xc3\xea\x18aY\xd1\xbe\x8a\x19\xe7\x00V\xa5\xf3\x92%o\xcb/%\xc6O\xdc\x851\x15}\xd0\x86\x8c`\xd2\xa16V\x10\xbd\x83;\xf4\xe3\xe4\xf9\xc8\x86\x1e\x10\xd4\xf1F\xe6Y\xd5\'t\x8f\fE\xe9\x04\xb6\xb6aGgk\xbaT@\x06\xbe\xbd\xb0\xa4\xeb@9\xb4\xd2_\xa8\xb5\x98\xa8#\xfc\x1f\x8dhU\x05\x91\nY\xa4>|Z\x1a\xc5\a[\x92\x8f6l\xaa\x12i*\xc5\xe0\x115\x90\t\xcb\xfeG\xaa\xc2\xf4\xb3\x9e\xaa\x8f&:\xc5\xea[\xd6\x16\x84@\xeb\xc3}\xd4@\xc9\xa92\xdb\xecU\x1a\x8f\xfe\xb3\xb0U\xaa\xd5\xe0\xcav{2:;{\xb5\xe3\xbf\xf0\xd9\xdc\t\x0f\x8bN5\xd5\xc1\x14\xb7s\xfb\xb4m(\ry\xd1\xe8}\x8av\xc9\xef3\xd2\xe0\xfb\xfc\x15\x81\x18{X\xd3\x0f\x9d[') sendto$unix(0xffffffffffffffff, &(0x7f0000000240)="596edf87814b433c3703e25dbc20daf3154560b9fe8138ea6bb9248d13950dbe91a4bc3b0c3c6dd1a2cc7e3095e9fc9d78ef2a8ed301198c08bfd609284fcbec67bb4b52ed99885bf5cfb1c441913285a9d07bdbd561040953f5c00f4ef06ee0a83aa15223712641b458bd3e9e647c9c53d6cc83e8c9bafc75efbb", 0x7b, 0x20008800, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e20}, 0x6e) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20402, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7f}, r1, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000002c0)=0x0) getpriority(0x0, r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x660c, 0x1) r5 = dup(r2) write$P9_RFSYNC(r5, &(0x7f0000000340)={0x7, 0x33, 0x2}, 0x7) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000200)=0x10000) r6 = memfd_create(&(0x7f0000000040)='G\'\x00\x9c\x1cH\xf9\x9e\x00\x16~\xdb`\x89\x86\x9a\xd4\xceof-\xbc\x12\x94\xe7\xcbH\x8dU;Z\xfc\xe1id?\xd4\x8a\x00Y@\xfe\xfe\b\x8d\xd0\x84\xcd\xf5\xd5\x83\xec\x96;\x16\x17\xf2\xba\xe1=\xe6.\xa5|\x02q', 0x0) mmap(&(0x7f00004ba000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0xfffff000) fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000300)={0x0, 0x10001, 0x0, 0xfffffff8, 0x19, 0x0, 0x3, 0x0, 0x0, 0x5, 0x9, 0x101}) write$evdev(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x2710}}], 0x362) socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x9) bind(0xffffffffffffffff, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) 18:22:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:22:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:39 executing program 2 (fault-call:8 fault-nth:8): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:22:39 executing program 1: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000340)=r5) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x10, r5, 0x5) [ 661.008094] XFS (loop1): unknown mount option [mask=^MAY_APPEND]. [ 661.010815] device bridge_slave_1 left promiscuous mode [ 661.024955] FAULT_INJECTION: forcing a failure. [ 661.024955] name failslab, interval 1, probability 0, space 0, times 0 [ 661.031170] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.052408] Bluetooth: Unknown HCI packet type 5e [ 661.059506] Bluetooth: Unknown HCI packet type 43 [ 661.066973] Bluetooth: Unknown HCI packet type 00 [ 661.084831] Bluetooth: Unknown HCI packet type 5e [ 661.095464] CPU: 1 PID: 20860 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 661.103746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.113114] Call Trace: [ 661.115836] dump_stack+0x142/0x197 [ 661.119825] should_fail.cold+0x10f/0x159 [ 661.124215] should_failslab+0xdb/0x130 [ 661.128215] kmem_cache_alloc+0x2d7/0x780 [ 661.132595] ? lock_downgrade+0x740/0x740 [ 661.136972] ext4_init_io_end+0x27/0x100 [ 661.142407] ext4_writepages+0x10d6/0x2fd0 [ 661.146913] ? ext4_mark_inode_dirty+0x860/0x860 [ 661.152144] ? wbc_attach_and_unlock_inode+0x4c0/0x8f0 [ 661.157467] ? find_held_lock+0x35/0x130 [ 661.161818] ? ext4_mark_inode_dirty+0x860/0x860 [ 661.166607] do_writepages+0xd0/0x250 [ 661.170605] ? do_writepages+0xd0/0x250 [ 661.174611] ? page_writeback_cpu_online+0x20/0x20 [ 661.180667] ? do_raw_spin_unlock+0x16b/0x260 [ 661.185813] ? _raw_spin_unlock+0x2d/0x50 [ 661.190069] ? wbc_attach_and_unlock_inode+0x5c1/0x8f0 [ 661.195678] __filemap_fdatawrite_range+0x24e/0x320 [ 661.201009] ? replace_page_cache_page+0x700/0x700 [ 661.206241] filemap_write_and_wait_range+0x3e/0xa0 [ 661.211470] generic_file_direct_write+0x333/0x430 [ 661.216464] __generic_file_write_iter+0x2bc/0x5b0 [ 661.221420] ext4_file_write_iter+0x2ac/0xe90 [ 661.226287] ? ext4_file_mmap+0x2c0/0x2c0 [ 661.230469] ? trace_hardirqs_on+0x10/0x10 [ 661.234734] ? iov_iter_init+0xaf/0x1d0 [ 661.238733] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 661.243685] __vfs_write+0x4a7/0x6b0 [ 661.247427] ? kernel_read+0x120/0x120 [ 661.251338] ? check_preemption_disabled+0x3c/0x250 [ 661.256384] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 661.261862] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 661.266742] ? __sb_start_write+0x153/0x2f0 [ 661.271376] vfs_write+0x198/0x500 [ 661.275039] SyS_write+0xfd/0x230 [ 661.278689] ? SyS_read+0x230/0x230 [ 661.283054] ? do_syscall_64+0x53/0x640 [ 661.287225] ? SyS_read+0x230/0x230 [ 661.290982] do_syscall_64+0x1e8/0x640 [ 661.294913] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.299977] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 661.305293] RIP: 0033:0x45a6f9 [ 661.308518] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.316329] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 661.323776] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 661.331253] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 661.338739] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 661.346447] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 661.363378] Bluetooth: Unknown HCI packet type 50 [ 661.368868] Bluetooth: Unknown HCI packet type 5e [ 661.374196] device bridge_slave_0 left promiscuous mode [ 661.374400] Bluetooth: Unknown HCI packet type 40 [ 661.379930] bridge0: port 1(bridge_slave_0) entered disabled state 18:22:39 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:39 executing program 2 (fault-call:8 fault-nth:9): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 661.523379] device hsr_slave_1 left promiscuous mode [ 661.555980] FAULT_INJECTION: forcing a failure. [ 661.555980] name failslab, interval 1, probability 0, space 0, times 0 [ 661.572508] device hsr_slave_0 left promiscuous mode [ 661.590420] CPU: 0 PID: 20872 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 661.598684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 661.608515] Call Trace: [ 661.611149] dump_stack+0x142/0x197 [ 661.615058] should_fail.cold+0x10f/0x159 [ 661.619365] should_failslab+0xdb/0x130 [ 661.623562] kmem_cache_alloc+0x2d7/0x780 [ 661.627770] ? iov_iter_alignment+0x152/0x650 [ 661.633165] do_blockdev_direct_IO+0x331/0x9130 [ 661.637879] ? find_get_entries+0x473/0x980 [ 661.642330] ? radix_tree_next_chunk+0x43e/0x9a0 [ 661.647136] ? lock_downgrade+0x740/0x740 [ 661.651355] ? write_end_fn+0xa0/0xa0 [ 661.655205] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 661.661740] ? sb_init_dio_done_wq+0x80/0x80 [ 661.666458] ? __lock_acquire+0x5f7/0x4620 [ 661.670912] ? filemap_fault+0x1de0/0x1de0 [ 661.675279] ? check_preemption_disabled+0x3c/0x250 [ 661.680788] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 661.687505] __blockdev_direct_IO+0xa1/0xca [ 661.692150] ? write_end_fn+0xa0/0xa0 [ 661.696176] ext4_direct_IO+0x70d/0x1890 [ 661.700465] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 661.706490] generic_file_direct_write+0x1e7/0x430 [ 661.711697] __generic_file_write_iter+0x2bc/0x5b0 [ 661.716675] ext4_file_write_iter+0x2ac/0xe90 [ 661.721308] ? ext4_file_mmap+0x2c0/0x2c0 [ 661.725523] ? trace_hardirqs_on+0x10/0x10 [ 661.729796] ? iov_iter_init+0xaf/0x1d0 [ 661.733807] __vfs_write+0x4a7/0x6b0 [ 661.737567] ? kernel_read+0x120/0x120 [ 661.741592] ? check_preemption_disabled+0x3c/0x250 [ 661.746909] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 661.752439] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 661.757323] ? __sb_start_write+0x153/0x2f0 [ 661.761863] vfs_write+0x198/0x500 [ 661.765534] SyS_write+0xfd/0x230 [ 661.769125] ? SyS_read+0x230/0x230 [ 661.772783] ? do_syscall_64+0x53/0x640 [ 661.777159] ? SyS_read+0x230/0x230 [ 661.780913] do_syscall_64+0x1e8/0x640 [ 661.784833] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 661.789727] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 661.795036] RIP: 0033:0x45a6f9 [ 661.798267] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 661.806102] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 661.813739] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 661.821210] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 661.828614] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 661.836034] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 661.850581] XFS (loop1): unknown mount option [mask=^MAY_APPEND]. [ 661.950977] team0 (unregistering): Port device team_slave_1 removed 18:22:40 executing program 2 (fault-call:8 fault-nth:10): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 662.025562] team0 (unregistering): Port device team_slave_0 removed [ 662.039762] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 662.095369] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 662.102859] FAULT_INJECTION: forcing a failure. [ 662.102859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 662.102879] CPU: 1 PID: 20887 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 662.102888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.102893] Call Trace: [ 662.102913] dump_stack+0x142/0x197 [ 662.102935] should_fail.cold+0x10f/0x159 [ 662.102949] ? __might_sleep+0x93/0xb0 [ 662.102977] __alloc_pages_nodemask+0x1d6/0x7a0 [ 662.151252] ? __alloc_pages_slowpath+0x2930/0x2930 [ 662.156517] ? __do_page_cache_readahead+0x28e/0xa20 [ 662.161781] alloc_pages_current+0xec/0x1e0 [ 662.166231] __page_cache_alloc+0x248/0x3e0 [ 662.170759] __do_page_cache_readahead+0x2d9/0xa20 [ 662.175813] ? read_cache_pages+0x6b0/0x6b0 [ 662.180255] ? pagecache_get_page+0x133/0x9e0 [ 662.184801] filemap_fault+0x92a/0x1de0 [ 662.188802] ? filemap_fault+0x92a/0x1de0 [ 662.192970] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 662.198177] ? __lock_page_or_retry+0x8d0/0x8d0 [ 662.203325] ? lock_acquire+0x16f/0x430 [ 662.207452] ? ext4_filemap_fault+0x7b/0xb0 [ 662.211813] ext4_filemap_fault+0x83/0xb0 [ 662.216200] __do_fault+0x104/0x390 [ 662.219945] __handle_mm_fault+0x23bd/0x33d0 [ 662.224389] ? copy_page_range+0x1de0/0x1de0 [ 662.228921] ? find_held_lock+0x35/0x130 [ 662.233036] ? handle_mm_fault+0x1b6/0x7c0 [ 662.237393] handle_mm_fault+0x293/0x7c0 [ 662.241569] __get_user_pages+0x465/0x12e0 [ 662.245920] ? follow_page_mask+0x1630/0x1630 [ 662.250523] ? lock_acquire+0x16f/0x430 [ 662.254813] get_user_pages_unlocked+0x1f0/0x2f0 [ 662.259599] ? get_user_pages_locked+0x3d0/0x3d0 [ 662.264372] ? get_user_pages_fast+0x171/0x2d0 [ 662.269214] get_user_pages_fast+0x228/0x2d0 [ 662.273744] ? __get_user_pages_fast+0x2e0/0x2e0 [ 662.278522] ? __lock_is_held+0xb6/0x140 [ 662.282613] iov_iter_get_pages+0x20f/0xd10 [ 662.286959] ? csum_and_copy_from_iter+0xd50/0xd50 [ 662.292128] ? iov_iter_npages+0x17c/0x7e0 [ 662.296392] do_blockdev_direct_IO+0x3638/0x9130 [ 662.301460] ? sb_init_dio_done_wq+0x80/0x80 [ 662.306270] ? __lock_acquire+0x5f7/0x4620 [ 662.310555] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 662.316647] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 662.322557] __blockdev_direct_IO+0xa1/0xca [ 662.326902] ? write_end_fn+0xa0/0xa0 [ 662.330735] ext4_direct_IO+0x70d/0x1890 [ 662.335292] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 662.342867] generic_file_direct_write+0x1e7/0x430 [ 662.347827] __generic_file_write_iter+0x2bc/0x5b0 [ 662.352815] ext4_file_write_iter+0x2ac/0xe90 [ 662.357778] ? ext4_file_mmap+0x2c0/0x2c0 [ 662.361956] ? trace_hardirqs_on+0x10/0x10 [ 662.366227] ? iov_iter_init+0xaf/0x1d0 [ 662.370566] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 662.375788] __vfs_write+0x4a7/0x6b0 [ 662.379536] ? kernel_read+0x120/0x120 [ 662.383640] ? check_preemption_disabled+0x3c/0x250 [ 662.388786] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 662.394655] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 662.399637] ? __sb_start_write+0x153/0x2f0 [ 662.403987] vfs_write+0x198/0x500 [ 662.407560] SyS_write+0xfd/0x230 [ 662.411057] ? SyS_read+0x230/0x230 [ 662.414788] ? do_syscall_64+0x53/0x640 [ 662.418876] ? SyS_read+0x230/0x230 [ 662.422522] do_syscall_64+0x1e8/0x640 [ 662.427062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 662.432041] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 662.437517] RIP: 0033:0x45a6f9 [ 662.440803] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 662.448944] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 662.456324] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 662.463829] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 662.471569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 662.478854] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:40 executing program 2 (fault-call:8 fault-nth:11): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 662.539506] bond0 (unregistering): Released all slaves [ 662.608677] FAULT_INJECTION: forcing a failure. [ 662.608677] name failslab, interval 1, probability 0, space 0, times 0 18:22:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 662.665885] CPU: 1 PID: 20890 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 662.673953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 662.684067] Call Trace: [ 662.686675] dump_stack+0x142/0x197 [ 662.690330] should_fail.cold+0x10f/0x159 [ 662.694587] ? __lock_is_held+0xb6/0x140 [ 662.698664] ? mempool_free+0x1d0/0x1d0 [ 662.702679] should_failslab+0xdb/0x130 [ 662.706669] kmem_cache_alloc+0x47/0x780 [ 662.710752] ? mempool_free+0x1d0/0x1d0 [ 662.714849] mempool_alloc_slab+0x47/0x60 [ 662.719094] mempool_alloc+0x138/0x300 [ 662.723089] ? remove_element.isra.0+0x1b0/0x1b0 [ 662.727865] ? ext4_map_blocks+0x3bc/0x17c0 [ 662.732197] ? __lru_cache_add+0x18a/0x250 [ 662.736553] bio_alloc_bioset+0x368/0x680 [ 662.741015] ? bvec_alloc+0x2e0/0x2e0 [ 662.745016] ext4_mpage_readpages+0xba1/0x1760 [ 662.749742] ? mpage_end_io+0x300/0x300 [ 662.753756] ? __do_page_cache_readahead+0x28e/0xa20 [ 662.758894] ? alloc_pages_current+0xf4/0x1e0 [ 662.763445] ext4_readpages+0xb5/0xf0 [ 662.767615] ? ext4_bmap+0x400/0x400 [ 662.771697] __do_page_cache_readahead+0x5ba/0xa20 [ 662.776826] ? read_cache_pages+0x6b0/0x6b0 [ 662.781188] ? pagecache_get_page+0x133/0x9e0 [ 662.785716] filemap_fault+0x92a/0x1de0 [ 662.789713] ? filemap_fault+0x92a/0x1de0 [ 662.794482] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 662.799470] ? __lock_page_or_retry+0x8d0/0x8d0 [ 662.804243] ? lock_acquire+0x16f/0x430 [ 662.808415] ? ext4_filemap_fault+0x7b/0xb0 [ 662.813128] ext4_filemap_fault+0x83/0xb0 [ 662.817413] __do_fault+0x104/0x390 [ 662.821155] __handle_mm_fault+0x23bd/0x33d0 [ 662.825582] ? copy_page_range+0x1de0/0x1de0 [ 662.830001] ? find_held_lock+0x35/0x130 [ 662.834083] ? handle_mm_fault+0x1b6/0x7c0 [ 662.838360] handle_mm_fault+0x293/0x7c0 [ 662.842828] __get_user_pages+0x465/0x12e0 [ 662.847097] ? follow_page_mask+0x1630/0x1630 [ 662.851898] ? lock_acquire+0x16f/0x430 [ 662.855946] get_user_pages_unlocked+0x1f0/0x2f0 [ 662.860833] ? get_user_pages_locked+0x3d0/0x3d0 [ 662.866012] ? get_user_pages_fast+0x171/0x2d0 [ 662.870715] get_user_pages_fast+0x228/0x2d0 [ 662.875165] ? __get_user_pages_fast+0x2e0/0x2e0 [ 662.880050] ? __lock_is_held+0xb6/0x140 [ 662.884305] iov_iter_get_pages+0x20f/0xd10 [ 662.888733] ? csum_and_copy_from_iter+0xd50/0xd50 [ 662.893684] ? iov_iter_npages+0x17c/0x7e0 [ 662.898046] do_blockdev_direct_IO+0x3638/0x9130 [ 662.903205] ? sb_init_dio_done_wq+0x80/0x80 [ 662.907641] ? __lock_acquire+0x5f7/0x4620 [ 662.911914] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 662.917924] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 662.924002] __blockdev_direct_IO+0xa1/0xca [ 662.928445] ? write_end_fn+0xa0/0xa0 [ 662.932288] ext4_direct_IO+0x70d/0x1890 [ 662.936372] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 662.942286] generic_file_direct_write+0x1e7/0x430 [ 662.947267] __generic_file_write_iter+0x2bc/0x5b0 [ 662.952234] ext4_file_write_iter+0x2ac/0xe90 [ 662.956751] ? ext4_file_mmap+0x2c0/0x2c0 [ 662.965872] ? trace_hardirqs_on+0x10/0x10 [ 662.970140] ? iov_iter_init+0xaf/0x1d0 [ 662.974130] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 662.979082] __vfs_write+0x4a7/0x6b0 [ 662.982821] ? kernel_read+0x120/0x120 [ 662.986998] ? check_preemption_disabled+0x3c/0x250 [ 662.992158] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 662.997632] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 663.002434] ? __sb_start_write+0x153/0x2f0 [ 663.006801] vfs_write+0x198/0x500 [ 663.010365] SyS_write+0xfd/0x230 [ 663.013836] ? SyS_read+0x230/0x230 [ 663.017474] ? do_syscall_64+0x53/0x640 [ 663.021640] ? SyS_read+0x230/0x230 [ 663.025414] do_syscall_64+0x1e8/0x640 [ 663.029513] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 663.034381] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 663.039676] RIP: 0033:0x45a6f9 [ 663.043396] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.051297] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 663.059146] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 18:22:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 663.066623] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 663.074276] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 663.081558] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 663.110327] Bluetooth: hci0 command 0x1003 tx timeout [ 663.129149] Bluetooth: hci0 sending frame failed (-49) 18:22:41 executing program 2 (fault-call:8 fault-nth:12): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 663.208462] Bluetooth: Unknown HCI packet type 5e [ 663.218604] Bluetooth: Unknown HCI packet type 43 [ 663.224315] Bluetooth: Unknown HCI packet type 00 [ 663.238021] Bluetooth: Unknown HCI packet type 5e [ 663.257687] Bluetooth: Unknown HCI packet type 50 [ 663.263950] Bluetooth: Unknown HCI packet type 5e [ 663.277436] Bluetooth: Unknown HCI packet type 40 [ 663.300333] FAULT_INJECTION: forcing a failure. [ 663.300333] name failslab, interval 1, probability 0, space 0, times 0 [ 663.321545] CPU: 1 PID: 20904 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 663.329482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.338847] Call Trace: [ 663.342183] dump_stack+0x142/0x197 [ 663.347386] should_fail.cold+0x10f/0x159 [ 663.351663] ? __lock_is_held+0xb6/0x140 [ 663.355837] ? mempool_free+0x1d0/0x1d0 [ 663.359900] should_failslab+0xdb/0x130 [ 663.364005] kmem_cache_alloc+0x47/0x780 [ 663.368073] ? mempool_free+0x1d0/0x1d0 [ 663.372332] mempool_alloc_slab+0x47/0x60 [ 663.376764] mempool_alloc+0x138/0x300 [ 663.380658] ? remove_element.isra.0+0x1b0/0x1b0 [ 663.385423] ? __get_user_pages_fast+0x2e0/0x2e0 [ 663.390391] bio_alloc_bioset+0x368/0x680 [ 663.394542] ? bvec_alloc+0x2e0/0x2e0 [ 663.398345] do_blockdev_direct_IO+0x5549/0x9130 [ 663.403224] ? sb_init_dio_done_wq+0x80/0x80 [ 663.408070] ? __lock_acquire+0x5f7/0x4620 [ 663.412416] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 663.418934] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 663.424839] __blockdev_direct_IO+0xa1/0xca [ 663.429272] ? write_end_fn+0xa0/0xa0 [ 663.433076] ext4_direct_IO+0x70d/0x1890 [ 663.437314] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 663.443300] generic_file_direct_write+0x1e7/0x430 [ 663.448448] __generic_file_write_iter+0x2bc/0x5b0 [ 663.453384] ext4_file_write_iter+0x2ac/0xe90 [ 663.457998] ? ext4_file_mmap+0x2c0/0x2c0 [ 663.462250] ? trace_hardirqs_on+0x10/0x10 [ 663.466836] ? iov_iter_init+0xaf/0x1d0 [ 663.470807] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 663.475780] __vfs_write+0x4a7/0x6b0 [ 663.479501] ? kernel_read+0x120/0x120 [ 663.483390] ? check_preemption_disabled+0x3c/0x250 [ 663.488531] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 663.493999] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 663.499015] ? __sb_start_write+0x153/0x2f0 [ 663.503348] vfs_write+0x198/0x500 [ 663.506905] SyS_write+0xfd/0x230 [ 663.510379] ? SyS_read+0x230/0x230 [ 663.514189] ? do_syscall_64+0x53/0x640 [ 663.518253] ? SyS_read+0x230/0x230 [ 663.522206] do_syscall_64+0x1e8/0x640 [ 663.526129] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 663.531429] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 663.537774] RIP: 0033:0x45a6f9 [ 663.541059] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 663.548979] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 663.556443] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 663.563913] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 663.573361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 663.582727] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 664.971584] IPVS: ftp: loaded support on port[0] = 21 [ 665.190347] Bluetooth: hci0 command 0x1001 tx timeout [ 665.195952] Bluetooth: hci0 sending frame failed (-49) [ 665.270315] Bluetooth: hci1 command 0x1003 tx timeout [ 665.275661] Bluetooth: hci1 sending frame failed (-49) [ 665.814663] IPVS: ftp: loaded support on port[0] = 21 [ 665.880007] chnl_net:caif_netlink_parms(): no params data found [ 665.924761] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.931683] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.939396] device bridge_slave_0 entered promiscuous mode [ 665.958467] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.966258] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.976040] device bridge_slave_1 entered promiscuous mode [ 666.031437] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 666.044758] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 666.055300] chnl_net:caif_netlink_parms(): no params data found [ 666.082520] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 666.090569] team0: Port device team_slave_0 added [ 666.101991] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 666.109417] team0: Port device team_slave_1 added [ 666.127092] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 666.139613] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 666.155759] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.162575] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.169489] device bridge_slave_0 entered promiscuous mode [ 666.183549] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.190182] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.197715] device bridge_slave_1 entered promiscuous mode [ 666.263928] device hsr_slave_0 entered promiscuous mode [ 666.322487] device hsr_slave_1 entered promiscuous mode [ 666.388384] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 666.400536] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 666.412850] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 666.426448] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 666.443236] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 666.452089] team0: Port device team_slave_0 added [ 666.465064] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 666.473019] team0: Port device team_slave_1 added [ 666.479380] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 666.488565] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 666.509331] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.516091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.522855] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.529407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.593287] device hsr_slave_0 entered promiscuous mode [ 666.640664] device hsr_slave_1 entered promiscuous mode [ 666.701407] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 666.708947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 666.734143] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.740552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.747242] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.753750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.799971] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 666.807430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.818748] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 666.828052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.835820] device bridge_slave_1 left promiscuous mode [ 666.841765] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.901215] device bridge_slave_0 left promiscuous mode [ 666.907595] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.024247] device hsr_slave_1 left promiscuous mode [ 667.083372] device hsr_slave_0 left promiscuous mode [ 667.123453] team0 (unregistering): Port device team_slave_1 removed [ 667.135955] team0 (unregistering): Port device team_slave_0 removed [ 667.146060] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 667.204929] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 667.270224] Bluetooth: hci0 command 0x1009 tx timeout [ 667.287298] bond0 (unregistering): Released all slaves [ 667.357298] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 667.363919] Bluetooth: hci1 command 0x1001 tx timeout [ 667.369273] Bluetooth: hci1 sending frame failed (-49) [ 667.374754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.382435] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.389749] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.397657] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 667.405353] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.413270] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.426138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 667.434227] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 667.441007] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.447735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 667.455539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.466310] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 667.473163] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.526353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 667.534445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 667.546602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.554992] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.561745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.572625] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 667.584995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 667.593970] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.606837] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.613679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.625378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 667.633422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.642814] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.651704] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.658242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.667396] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 667.677749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.686999] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.696026] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.702571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.715919] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 667.725124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 667.733175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.741619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.752354] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 667.763840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 667.772597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.781812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.797360] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 667.807207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 667.819813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.829535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.842011] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.852721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.865725] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 667.878938] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 667.888398] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.899605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.909223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.923112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.934141] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.945022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.956972] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 667.970012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 667.977516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.986356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.994113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 668.005199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 668.016716] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 668.026063] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 668.035715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 668.046578] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 668.058431] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 668.066148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 668.074666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 668.086153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 668.094023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 668.107830] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 668.114921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 668.144231] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 668.152908] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 668.165531] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 668.175222] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 668.185911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.193332] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.205743] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.213188] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.229469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.246625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.430610] Bluetooth: hci1 command 0x1009 tx timeout 18:22:47 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r2) ioctl$FS_IOC_SETVERSION(r2, 0x40087602, &(0x7f0000000040)) syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="0201fdffffff01000000ff0700000000000055", 0x13, 0x1c0}]) [ 669.611291] Dev loop0: unable to read RDB block 1 [ 669.617284] loop0: unable to read partition table [ 669.625568] loop0: partition table beyond EOD, truncated [ 669.632735] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 670.150493] net_ratelimit: 22 callbacks suppressed [ 670.150499] protocol 88fb is buggy, dev hsr_slave_0 [ 670.166554] protocol 88fb is buggy, dev hsr_slave_1 [ 670.230258] protocol 88fb is buggy, dev hsr_slave_0 [ 670.250875] protocol 88fb is buggy, dev hsr_slave_1 [ 670.320233] protocol 88fb is buggy, dev hsr_slave_0 [ 670.326978] protocol 88fb is buggy, dev hsr_slave_1 18:22:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:22:49 executing program 2 (fault-call:8 fault-nth:13): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:22:49 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:49 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xc4a, 0x8000) r5 = dup3(r4, r3, 0x40000) syz_kvm_setup_cpu$x86(r5, r2, &(0x7f000000f000/0x18000)=nil, 0x0, 0x62dd408204794e9b, 0x0, 0x0, 0xffffffffffffff78) 18:22:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 671.272014] FAULT_INJECTION: forcing a failure. [ 671.272014] name failslab, interval 1, probability 0, space 0, times 0 [ 671.320943] device bridge_slave_1 left promiscuous mode [ 671.324480] Bluetooth: Unknown HCI packet type 00 [ 671.327829] Bluetooth: Unknown HCI packet type 5e [ 671.336119] CPU: 1 PID: 20953 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 671.346190] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.348536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.348543] Call Trace: [ 671.348564] dump_stack+0x142/0x197 [ 671.348585] should_fail.cold+0x10f/0x159 [ 671.348601] ? __lock_is_held+0xb6/0x140 [ 671.356137] Bluetooth: Unknown HCI packet type 43 [ 671.366551] ? mempool_free+0x1d0/0x1d0 [ 671.366566] should_failslab+0xdb/0x130 [ 671.366578] kmem_cache_alloc+0x47/0x780 [ 671.366593] ? mempool_free+0x1d0/0x1d0 [ 671.366601] mempool_alloc_slab+0x47/0x60 [ 671.366609] mempool_alloc+0x138/0x300 [ 671.366616] ? mempool_free+0x1d0/0x1d0 [ 671.366629] ? remove_element.isra.0+0x1b0/0x1b0 [ 671.366641] ? remove_element.isra.0+0x1b0/0x1b0 [ 671.366659] bvec_alloc+0xd1/0x2e0 [ 671.366671] bio_alloc_bioset+0x419/0x680 [ 671.366683] ? bvec_alloc+0x2e0/0x2e0 [ 671.366700] do_blockdev_direct_IO+0x5549/0x9130 [ 671.366731] ? sb_init_dio_done_wq+0x80/0x80 [ 671.366742] ? __lock_acquire+0x5f7/0x4620 [ 671.366783] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 671.366803] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 671.413031] Bluetooth: Unknown HCI packet type 5e [ 671.413675] __blockdev_direct_IO+0xa1/0xca [ 671.435282] Bluetooth: Unknown HCI packet type 50 [ 671.435318] ? write_end_fn+0xa0/0xa0 [ 671.449851] Bluetooth: Unknown HCI packet type 5e [ 671.454413] ext4_direct_IO+0x70d/0x1890 [ 671.454429] ? ext4_dio_get_block_unwritten_async+0x1c0/0x1c0 [ 671.454451] generic_file_direct_write+0x1e7/0x430 [ 671.454465] __generic_file_write_iter+0x2bc/0x5b0 [ 671.454480] ext4_file_write_iter+0x2ac/0xe90 [ 671.454493] ? ext4_file_mmap+0x2c0/0x2c0 [ 671.454508] ? trace_hardirqs_on+0x10/0x10 [ 671.454524] ? iov_iter_init+0xaf/0x1d0 [ 671.454531] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 671.454543] __vfs_write+0x4a7/0x6b0 [ 671.454553] ? kernel_read+0x120/0x120 [ 671.454565] ? check_preemption_disabled+0x3c/0x250 [ 671.454581] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 671.454596] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 671.454607] ? __sb_start_write+0x153/0x2f0 [ 671.454620] vfs_write+0x198/0x500 [ 671.474872] Bluetooth: Unknown HCI packet type 40 [ 671.477423] SyS_write+0xfd/0x230 [ 671.477437] ? SyS_read+0x230/0x230 [ 671.477451] ? do_syscall_64+0x53/0x640 [ 671.477461] ? SyS_read+0x230/0x230 [ 671.610219] do_syscall_64+0x1e8/0x640 [ 671.614146] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 671.619466] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 671.625462] RIP: 0033:0x45a6f9 [ 671.628956] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 671.639379] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 671.648043] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 671.656525] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 671.666843] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 671.676756] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 671.726790] device bridge_slave_0 left promiscuous mode [ 671.774981] bridge0: port 1(bridge_slave_0) entered disabled state 18:22:50 executing program 2 (fault-call:8 fault-nth:14): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:22:50 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') [ 671.918323] FAULT_INJECTION: forcing a failure. [ 671.918323] name failslab, interval 1, probability 0, space 0, times 0 18:22:50 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) sendto$inet(r0, &(0x7f00000015c0)="731247f8bf09abec01ced5d4dd6e92aa62aa7d935b7e32ca5c14d70409a996a1de1cf7f93a4586204c034bd8e4c941d69f646bd4ac73715023d30170e4da386060ff01c4", 0xb9, 0x8800, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x1) recvmmsg(r0, &(0x7f0000003c80), 0x38e, 0x62, 0x0) [ 671.989151] CPU: 1 PID: 20974 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 671.998401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.014151] Call Trace: [ 672.019392] dump_stack+0x142/0x197 [ 672.026670] should_fail.cold+0x10f/0x159 [ 672.033879] ? __lock_is_held+0xb6/0x140 [ 672.045344] ? mempool_free+0x1d0/0x1d0 [ 672.051559] should_failslab+0xdb/0x130 [ 672.057222] kmem_cache_alloc+0x47/0x780 [ 672.061444] ? mempool_free+0x1d0/0x1d0 [ 672.066472] mempool_alloc_slab+0x47/0x60 [ 672.072449] mempool_alloc+0x138/0x300 [ 672.078255] ? remove_element.isra.0+0x1b0/0x1b0 [ 672.085493] ? save_trace+0x290/0x290 [ 672.091401] ? __might_sleep+0x93/0xb0 [ 672.098877] bio_alloc_bioset+0x368/0x680 [ 672.103639] ? bvec_alloc+0x2e0/0x2e0 [ 672.108793] submit_bh_wbc+0xf6/0x720 [ 672.112917] __sync_dirty_buffer+0xcf/0x260 [ 672.118300] sync_dirty_buffer+0x1b/0x20 [ 672.122900] ext4_write_inode+0x3c2/0x450 [ 672.128462] ? ext4_iget_normal+0xd0/0xd0 [ 672.132827] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 672.140214] __writeback_single_inode+0xb44/0x1120 [ 672.147031] writeback_single_inode+0x1fa/0x380 [ 672.152733] sync_inode_metadata+0x8c/0xb0 [ 672.157903] ? sync_inode+0x30/0x30 [ 672.163694] __generic_file_fsync+0x130/0x1a0 [ 672.169781] ext4_sync_file+0x755/0x12d0 [ 672.175979] ? ext4_getfsmap+0x880/0x880 [ 672.180722] vfs_fsync_range+0x10e/0x260 [ 672.185458] ext4_file_write_iter+0x68a/0xe90 [ 672.190708] ? ext4_file_mmap+0x2c0/0x2c0 [ 672.198833] ? trace_hardirqs_on+0x10/0x10 [ 672.205053] ? iov_iter_init+0xaf/0x1d0 [ 672.211788] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 672.220539] __vfs_write+0x4a7/0x6b0 [ 672.226285] ? kernel_read+0x120/0x120 [ 672.230172] protocol 88fb is buggy, dev hsr_slave_0 [ 672.231254] ? check_preemption_disabled+0x3c/0x250 [ 672.231274] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 672.231290] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 672.237615] protocol 88fb is buggy, dev hsr_slave_1 [ 672.243668] ? __sb_start_write+0x153/0x2f0 [ 672.243680] vfs_write+0x198/0x500 [ 672.243691] SyS_write+0xfd/0x230 [ 672.243700] ? SyS_read+0x230/0x230 [ 672.243713] ? do_syscall_64+0x53/0x640 [ 672.243842] ? SyS_read+0x230/0x230 [ 672.243857] do_syscall_64+0x1e8/0x640 [ 672.243867] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 672.244030] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 672.244043] RIP: 0033:0x45a6f9 [ 672.310225] protocol 88fb is buggy, dev hsr_slave_0 [ 672.311693] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 [ 672.315465] protocol 88fb is buggy, dev hsr_slave_1 [ 672.320588] ORIG_RAX: 0000000000000001 [ 672.320595] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 672.320600] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 672.320604] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 672.320609] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 672.320613] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:22:50 executing program 0: r0 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0x80000000) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000340)=r9) getpeername$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$FUSE_DEV_IOC_CLONE(r10, 0x8004e500, &(0x7f0000000340)=r12) clock_gettime(0x0, &(0x7f0000009ac0)={0x0, 0x0}) recvmmsg(r12, &(0x7f00000098c0)=[{{&(0x7f00000007c0)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f0000000840)=""/195, 0xc3}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x2, &(0x7f0000001980)=""/4096, 0x1000}, 0x8}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000002a00)=""/14, 0xe}, {&(0x7f0000002a40)=""/187, 0xbb}, {&(0x7f0000002b00)=""/212, 0xd4}, {&(0x7f0000002c00)=""/30, 0x1}, {&(0x7f0000000380)=""/34, 0x22}, {&(0x7f0000002c80)=""/151, 0x97}], 0x6, &(0x7f0000002dc0)}, 0xaec4}, {{&(0x7f0000002e00)=@rc, 0x80, &(0x7f0000002e80), 0x0, &(0x7f0000002ec0)=""/17, 0x11}, 0x4ef}, {{&(0x7f0000002f00)=@llc, 0x80, &(0x7f0000005040)=[{&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/71, 0x47}, {&(0x7f0000005000)=""/14, 0xe}], 0x4, &(0x7f0000005080)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000006080)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000006200)=[{&(0x7f0000006100)=""/87, 0x57}, {&(0x7f0000006180)=""/125, 0x7d}], 0x2, &(0x7f0000006240)=""/4096, 0x1000}, 0x10000}, {{0x0, 0x0, &(0x7f0000007240), 0x0, &(0x7f0000007280)=""/15, 0xf}, 0x2}, {{0x0, 0x0, &(0x7f0000008300)=[{&(0x7f00000072c0)=""/1, 0x1}, {&(0x7f0000007300)=""/4096, 0x1000}], 0x2}, 0x4}, {{&(0x7f0000008340)=@un=@abs, 0x80, &(0x7f0000009740)=[{&(0x7f00000083c0)=""/247, 0xf7}, {&(0x7f00000084c0)=""/4096, 0x1000}, {&(0x7f00000094c0)=""/184, 0xb8}, {&(0x7f0000009580)=""/178, 0xb2}, {&(0x7f0000009640)=""/251, 0xfb}], 0x5, &(0x7f00000097c0)=""/249, 0xf9}, 0x200}], 0x8, 0x0, &(0x7f0000009b00)={r13, r14+10000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000009b40)={{{@in6=@empty, @in6}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000009c40)=0xe8) r15 = socket$nl_route(0x10, 0x3, 0x0) r16 = socket$packet(0x11, 0x3, 0x300) r17 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r16, &(0x7f0000000100)={0x11, 0x0, r18, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r16, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r19}}, 0x20}}, 0x0) r20 = socket$nl_route(0x10, 0x3, 0x0) r21 = socket$packet(0x11, 0x3, 0x300) r22 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r22, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bind$packet(r21, &(0x7f0000000100)={0x11, 0x0, r23, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r21, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r20, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r24}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000009e00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000009dc0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200100eadf7d74f1b0ae91dabb7679332d5afb147957cd8da6ee63d9ce35d81aa56be7f5efadefd4773a42883ad1c5b9a57a1ad648181ef684fde86457f0c0bbd942adad819416b64afe2e266714addee7595e48ca07efc7e2a67a41f6c13eb469383da6a72d105c578d0acb186cad526fcee1d10c490ce2dc20810dcb49ce0f4200"/140, @ANYRES16=r6, @ANYBLOB="02002dbd7000ffdbdf2503000000"], 0x436}, 0x1, 0x0, 0x0, 0x10}, 0x40d0) ioctl$VIDIOC_OVERLAY(r5, 0x4004560e, &(0x7f0000000040)=0xffff8001) [ 672.413543] device hsr_slave_1 left promiscuous mode [ 672.464124] device hsr_slave_0 left promiscuous mode [ 672.513778] team0 (unregistering): Port device team_slave_1 removed [ 672.543785] team0 (unregistering): Port device team_slave_0 removed [ 672.580118] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 672.615096] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 672.717266] bond0 (unregistering): Released all slaves [ 673.350416] Bluetooth: hci0 command 0x1003 tx timeout [ 673.356865] Bluetooth: hci0 sending frame failed (-49) 18:22:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:22:51 executing program 2 (fault-call:8 fault-nth:15): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:22:51 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 673.803939] Bluetooth: Unknown HCI packet type 5e [ 673.809761] Bluetooth: Unknown HCI packet type 00 [ 673.811600] Bluetooth: Unknown HCI packet type 43 [ 673.824202] Bluetooth: Unknown HCI packet type 5e [ 673.836349] Bluetooth: Unknown HCI packet type 50 [ 673.844167] Bluetooth: Unknown HCI packet type 5e [ 673.849822] Bluetooth: Unknown HCI packet type 40 [ 673.860183] FAULT_INJECTION: forcing a failure. [ 673.860183] name failslab, interval 1, probability 0, space 0, times 0 [ 673.874925] CPU: 1 PID: 20993 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 673.884701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.895837] Call Trace: [ 673.898806] dump_stack+0x142/0x197 [ 673.903202] should_fail.cold+0x10f/0x159 [ 673.907746] ? __lock_is_held+0xb6/0x140 [ 673.913132] ? mempool_free+0x1d0/0x1d0 [ 673.918584] should_failslab+0xdb/0x130 [ 673.924384] kmem_cache_alloc+0x47/0x780 [ 673.930136] ? mempool_free+0x1d0/0x1d0 [ 673.935456] mempool_alloc_slab+0x47/0x60 [ 673.940338] mempool_alloc+0x138/0x300 [ 673.944894] ? remove_element.isra.0+0x1b0/0x1b0 [ 673.950215] ? trace_hardirqs_on+0x10/0x10 [ 673.955181] ? save_trace+0x290/0x290 [ 673.960246] ? save_trace+0x290/0x290 [ 673.964865] bio_alloc_bioset+0x368/0x680 [ 673.970904] ? bvec_alloc+0x2e0/0x2e0 [ 673.976158] submit_bh_wbc+0xf6/0x720 [ 673.980602] write_dirty_buffer+0x86/0x100 [ 673.986886] sync_mapping_buffers+0x2fc/0x920 [ 673.992537] ? write_dirty_buffer+0x100/0x100 [ 673.998220] ? lock_downgrade+0x740/0x740 [ 674.003225] ? iput+0x476/0x900 [ 674.006925] ext4_sync_file+0xbbf/0x12d0 [ 674.011920] ? ext4_getfsmap+0x880/0x880 [ 674.016921] vfs_fsync_range+0x10e/0x260 [ 674.022680] ext4_file_write_iter+0x68a/0xe90 [ 674.030087] ? ext4_file_mmap+0x2c0/0x2c0 [ 674.034877] ? trace_hardirqs_on+0x10/0x10 [ 674.040350] ? iov_iter_init+0xaf/0x1d0 [ 674.047130] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 674.053182] __vfs_write+0x4a7/0x6b0 [ 674.057636] ? kernel_read+0x120/0x120 [ 674.062584] ? check_preemption_disabled+0x3c/0x250 [ 674.068460] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 674.075618] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 674.081070] ? __sb_start_write+0x153/0x2f0 [ 674.085694] vfs_write+0x198/0x500 [ 674.090554] SyS_write+0xfd/0x230 [ 674.094637] ? SyS_read+0x230/0x230 [ 674.099486] ? do_syscall_64+0x53/0x640 [ 674.104152] ? SyS_read+0x230/0x230 [ 674.108174] do_syscall_64+0x1e8/0x640 [ 674.112328] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 674.118092] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 674.125232] RIP: 0033:0x45a6f9 [ 674.128969] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.139232] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 674.148549] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 674.159634] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 674.172133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 674.182671] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 674.821965] IPVS: ftp: loaded support on port[0] = 21 [ 675.430150] Bluetooth: hci0 command 0x1001 tx timeout [ 675.435674] Bluetooth: hci0 sending frame failed (-49) [ 675.748397] chnl_net:caif_netlink_parms(): no params data found [ 675.789444] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.796749] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.804731] device bridge_slave_0 entered promiscuous mode [ 675.812752] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.819570] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.828178] device bridge_slave_1 entered promiscuous mode [ 675.840183] Bluetooth: hci1 command 0x1003 tx timeout [ 675.846752] Bluetooth: hci1 sending frame failed (-49) [ 675.857487] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 675.867867] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 675.886903] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 675.894435] team0: Port device team_slave_0 added [ 675.900825] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 675.908092] team0: Port device team_slave_1 added [ 675.914399] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 675.922873] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 675.983883] device hsr_slave_0 entered promiscuous mode [ 676.050435] device hsr_slave_1 entered promiscuous mode [ 676.102936] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 676.111141] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 676.125439] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.132329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.138943] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.145544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.179207] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 676.186841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.196172] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 676.206562] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.214894] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.222948] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.235085] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 676.241821] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.251792] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.261233] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.268016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.278838] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.287407] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.294210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.312522] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 676.320991] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 676.331323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 676.345083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 676.357516] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.370812] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 676.377402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 676.385417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 676.397907] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 676.408156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 676.416355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 676.427413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 676.730512] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 677.510411] Bluetooth: hci0 command 0x1009 tx timeout [ 677.910954] Bluetooth: hci1 command 0x1001 tx timeout [ 677.917676] Bluetooth: hci1 sending frame failed (-49) [ 679.360264] device bridge_slave_1 left promiscuous mode [ 679.365927] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.421078] device bridge_slave_0 left promiscuous mode [ 679.426861] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.533752] device hsr_slave_1 left promiscuous mode [ 679.603629] device hsr_slave_0 left promiscuous mode [ 679.674261] team0 (unregistering): Port device team_slave_1 removed [ 679.684560] team0 (unregistering): Port device team_slave_0 removed [ 679.694549] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 679.743888] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 679.823064] bond0 (unregistering): Released all slaves [ 679.990737] Bluetooth: hci1 command 0x1009 tx timeout 18:22:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:59 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003800)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8000) sendmsg$alg(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001700)="14cf240deab3a478dd458a215a3e7c010395994f491bd9ca41089222dc27b8fd6c925bae01861375f50b2be453b2e34f726e43e15b63fdcbfafeac02f8d9d49e76c3dc4d20b7f6b13c3b552dba9a25fc2280d21efc2df830074761755082b7f910338e5d55ebe86bc07e5a30ec9156c2930c7a9a69567d610e66c2b3f9cca20770b0a4e84b4b3ab20dbc9ff68457f32d59114ac93c7df054e08e34974d164e5e03fe1b898493f692fd8bdc727c03f98c2459975d1e5a79d3a4c8693ab4f4086063b209ce5575e5056ea3108f85bd8fd3416c026e4b7429af3414f56c99a1d8979af7fe8872b74c051f", 0xe9}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="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", 0x5b0}], 0x3}, 0x4048880) 18:22:59 executing program 2 (fault-call:8 fault-nth:16): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:22:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1600bd60, &(0x7f0000000140)={0x7fffffff}, 0x4) 18:22:59 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:22:59 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") r1 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}, 0x20000000}, 0x1c, 0x0}}], 0x1, 0x0) 18:22:59 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xffa8, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 681.548049] FAULT_INJECTION: forcing a failure. [ 681.548049] name failslab, interval 1, probability 0, space 0, times 0 [ 681.562916] CPU: 0 PID: 21029 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 681.571155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.580754] Call Trace: [ 681.584705] dump_stack+0x142/0x197 [ 681.588512] should_fail.cold+0x10f/0x159 [ 681.592906] ? __lock_is_held+0xb6/0x140 [ 681.597629] ? mempool_free+0x1d0/0x1d0 [ 681.601649] should_failslab+0xdb/0x130 [ 681.606049] kmem_cache_alloc+0x47/0x780 [ 681.610583] ? mempool_free+0x1d0/0x1d0 [ 681.614600] mempool_alloc_slab+0x47/0x60 [ 681.618919] mempool_alloc+0x138/0x300 [ 681.622864] ? remove_element.isra.0+0x1b0/0x1b0 [ 681.627667] ? save_trace+0x290/0x290 [ 681.631525] ? __might_sleep+0x93/0xb0 [ 681.635506] bio_alloc_bioset+0x368/0x680 [ 681.639836] ? bvec_alloc+0x2e0/0x2e0 [ 681.643685] submit_bh_wbc+0xf6/0x720 [ 681.647579] __sync_dirty_buffer+0xcf/0x260 [ 681.651935] sync_dirty_buffer+0x1b/0x20 [ 681.656024] ext4_write_inode+0x3c2/0x450 [ 681.660303] ? ext4_iget_normal+0xd0/0xd0 [ 681.664538] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 681.670031] __writeback_single_inode+0xb44/0x1120 [ 681.675017] writeback_single_inode+0x1fa/0x380 [ 681.679864] sync_inode_metadata+0x8c/0xb0 [ 681.684144] ? sync_inode+0x30/0x30 [ 681.687840] ext4_sync_file+0xbdc/0x12d0 [ 681.692151] ? ext4_getfsmap+0x880/0x880 [ 681.697323] vfs_fsync_range+0x10e/0x260 [ 681.701481] ext4_file_write_iter+0x68a/0xe90 [ 681.706054] ? ext4_file_mmap+0x2c0/0x2c0 [ 681.710328] ? trace_hardirqs_on+0x10/0x10 [ 681.714703] ? iov_iter_init+0xaf/0x1d0 [ 681.718717] __vfs_write+0x4a7/0x6b0 [ 681.722559] ? kernel_read+0x120/0x120 [ 681.726509] ? check_preemption_disabled+0x3c/0x250 [ 681.731749] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 681.737334] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 681.742135] ? __sb_start_write+0x153/0x2f0 [ 681.746506] vfs_write+0x198/0x500 [ 681.750285] SyS_write+0xfd/0x230 [ 681.753959] ? SyS_read+0x230/0x230 [ 681.760447] ? do_syscall_64+0x53/0x640 [ 681.764550] ? SyS_read+0x230/0x230 [ 681.768220] do_syscall_64+0x1e8/0x640 [ 681.772264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 681.777161] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 681.782478] RIP: 0033:0x45a6f9 [ 681.785695] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 681.795744] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 681.803244] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 681.810766] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 681.818168] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 681.825675] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:23:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f0000000080)={0xa, 0x4e22, 0x1000000080000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts={{0x18}}], 0x18}, 0x0) 18:23:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xffa8, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) [ 683.851032] IPVS: ftp: loaded support on port[0] = 21 18:23:02 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:23:02 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6b) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="24000000220007031dfffd946f610500000000000543000000000000421ba3a20400ff7e", 0x24}], 0x1}, 0x0) 18:23:02 executing program 2 (fault-call:8 fault-nth:17): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 684.041673] Bluetooth: Unknown HCI packet type 5e [ 684.047020] Bluetooth: Unknown HCI packet type 43 [ 684.058924] Bluetooth: Unknown HCI packet type 00 [ 684.065539] Bluetooth: Unknown HCI packet type 5e [ 684.076426] Bluetooth: Unknown HCI packet type 50 [ 684.082392] Bluetooth: Unknown HCI packet type 5e [ 684.085573] FAULT_INJECTION: forcing a failure. [ 684.085573] name failslab, interval 1, probability 0, space 0, times 0 [ 684.087369] Bluetooth: Unknown HCI packet type 40 [ 684.102089] CPU: 0 PID: 21068 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 684.112547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.122209] Call Trace: [ 684.125100] dump_stack+0x142/0x197 [ 684.128879] should_fail.cold+0x10f/0x159 [ 684.133999] ? __lock_is_held+0xb6/0x140 [ 684.138168] ? mempool_free+0x1d0/0x1d0 [ 684.142341] should_failslab+0xdb/0x130 [ 684.146416] kmem_cache_alloc+0x47/0x780 [ 684.150508] ? mempool_free+0x1d0/0x1d0 [ 684.154695] mempool_alloc_slab+0x47/0x60 [ 684.158860] mempool_alloc+0x138/0x300 [ 684.162997] ? remove_element.isra.0+0x1b0/0x1b0 [ 684.167886] ? trace_hardirqs_on+0x10/0x10 [ 684.172129] ? save_trace+0x290/0x290 [ 684.176541] ? save_trace+0x290/0x290 [ 684.180356] bio_alloc_bioset+0x368/0x680 [ 684.184839] ? bvec_alloc+0x2e0/0x2e0 [ 684.188799] submit_bh_wbc+0xf6/0x720 [ 684.192741] write_dirty_buffer+0x86/0x100 [ 684.197242] sync_mapping_buffers+0x2fc/0x920 [ 684.201757] ? write_dirty_buffer+0x100/0x100 [ 684.206350] ? lock_downgrade+0x740/0x740 [ 684.210731] ? iput+0x476/0x900 [ 684.214208] ext4_sync_file+0xbbf/0x12d0 [ 684.218450] ? ext4_getfsmap+0x880/0x880 [ 684.222630] vfs_fsync_range+0x10e/0x260 [ 684.226712] ext4_file_write_iter+0x68a/0xe90 [ 684.231744] ? ext4_file_mmap+0x2c0/0x2c0 [ 684.235898] ? trace_hardirqs_on+0x10/0x10 [ 684.240334] ? iov_iter_init+0xaf/0x1d0 [ 684.244404] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 684.249532] __vfs_write+0x4a7/0x6b0 [ 684.253250] ? kernel_read+0x120/0x120 [ 684.257236] ? check_preemption_disabled+0x3c/0x250 [ 684.262288] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 684.267769] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 684.272548] ? __sb_start_write+0x153/0x2f0 [ 684.277057] vfs_write+0x198/0x500 [ 684.281216] SyS_write+0xfd/0x230 [ 684.284843] ? SyS_read+0x230/0x230 [ 684.288476] ? do_syscall_64+0x53/0x640 [ 684.292808] ? SyS_read+0x230/0x230 [ 684.296471] do_syscall_64+0x1e8/0x640 [ 684.301264] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 684.306236] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 684.311970] RIP: 0033:0x45a6f9 [ 684.315302] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 684.323495] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 684.330866] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 684.338414] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 684.346156] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 684.353436] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 684.959067] chnl_net:caif_netlink_parms(): no params data found [ 684.999610] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.007466] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.014709] device bridge_slave_0 entered promiscuous mode [ 685.022664] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.029301] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.036598] device bridge_slave_1 entered promiscuous mode [ 685.056935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 685.067207] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 685.087411] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 685.096319] team0: Port device team_slave_0 added [ 685.103825] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 685.111494] team0: Port device team_slave_1 added [ 685.117195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 685.125539] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 685.212874] device hsr_slave_0 entered promiscuous mode [ 685.270552] device hsr_slave_1 entered promiscuous mode [ 685.311133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 685.318685] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 685.332524] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.339080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.346178] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.352762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.384110] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 685.391222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.403354] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 685.412757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 685.421460] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.428451] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.438320] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 685.446068] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.454774] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.462632] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.469392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.479069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.487440] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.494337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.509740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.518195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.531850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.539542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.552273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.563012] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 685.569517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 685.576883] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.589604] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 685.598013] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.605725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.617865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.950439] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 686.070331] Bluetooth: hci0 command 0x1003 tx timeout [ 686.075663] Bluetooth: hci0 sending frame failed (-49) [ 686.950165] net_ratelimit: 12 callbacks suppressed [ 686.950170] protocol 88fb is buggy, dev hsr_slave_0 [ 686.962902] protocol 88fb is buggy, dev hsr_slave_1 [ 687.270161] protocol 88fb is buggy, dev hsr_slave_0 [ 687.275667] protocol 88fb is buggy, dev hsr_slave_1 [ 687.430145] protocol 88fb is buggy, dev hsr_slave_0 [ 687.435560] protocol 88fb is buggy, dev hsr_slave_1 18:23:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:23:05 executing program 0: r0 = socket(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}, 0x20000000}, 0x1c, 0x0}}], 0x1, 0x0) 18:23:05 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:23:05 executing program 5: openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) shmctl$SHM_LOCK(0x0, 0xb) getegid() r0 = socket(0x200000000000011, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) 18:23:05 executing program 2 (fault-call:8 fault-nth:18): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:23:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x74e003, 0x0, 0x2}}) 18:23:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x100000006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=@ethtool_ringparam={0xd, 0x0, 0x74e003, 0x0, 0x2}}) [ 687.800486] FAULT_INJECTION: forcing a failure. [ 687.800486] name failslab, interval 1, probability 0, space 0, times 0 [ 687.821783] CPU: 1 PID: 21092 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 687.831042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 687.840725] Call Trace: [ 687.843322] dump_stack+0x142/0x197 [ 687.847048] should_fail.cold+0x10f/0x159 [ 687.851488] ? __lock_is_held+0xb6/0x140 [ 687.855764] ? mempool_free+0x1d0/0x1d0 [ 687.860171] should_failslab+0xdb/0x130 [ 687.864551] kmem_cache_alloc+0x47/0x780 [ 687.868835] ? mempool_free+0x1d0/0x1d0 [ 687.872810] mempool_alloc_slab+0x47/0x60 [ 687.877216] mempool_alloc+0x138/0x300 [ 687.881192] ? remove_element.isra.0+0x1b0/0x1b0 [ 687.885963] ? save_trace+0x290/0x290 [ 687.889886] ? __might_sleep+0x93/0xb0 [ 687.894307] bio_alloc_bioset+0x368/0x680 [ 687.898733] ? bvec_alloc+0x2e0/0x2e0 [ 687.902648] submit_bh_wbc+0xf6/0x720 [ 687.906479] __sync_dirty_buffer+0xcf/0x260 [ 687.913100] sync_dirty_buffer+0x1b/0x20 [ 687.917254] ext4_write_inode+0x3c2/0x450 [ 687.921482] ? ext4_iget_normal+0xd0/0xd0 [ 687.926009] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 687.933177] __writeback_single_inode+0xb44/0x1120 [ 687.938197] writeback_single_inode+0x1fa/0x380 [ 687.944260] sync_inode_metadata+0x8c/0xb0 [ 687.948776] ? sync_inode+0x30/0x30 [ 687.952493] __generic_file_fsync+0x130/0x1a0 [ 687.957168] ext4_sync_file+0x755/0x12d0 [ 687.961416] ? ext4_getfsmap+0x880/0x880 [ 687.965491] vfs_fsync_range+0x10e/0x260 [ 687.969902] ext4_file_write_iter+0x68a/0xe90 [ 687.974780] ? ext4_file_mmap+0x2c0/0x2c0 [ 687.979070] ? trace_hardirqs_on+0x10/0x10 [ 687.984143] ? iov_iter_init+0xaf/0x1d0 [ 687.988364] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 687.993326] __vfs_write+0x4a7/0x6b0 [ 687.997537] ? kernel_read+0x120/0x120 [ 688.001438] ? check_preemption_disabled+0x3c/0x250 [ 688.006866] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 688.012423] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 688.017191] ? __sb_start_write+0x153/0x2f0 [ 688.021638] vfs_write+0x198/0x500 [ 688.025271] SyS_write+0xfd/0x230 [ 688.028810] ? SyS_read+0x230/0x230 [ 688.032844] ? do_syscall_64+0x53/0x640 [ 688.036833] ? SyS_read+0x230/0x230 [ 688.040466] do_syscall_64+0x1e8/0x640 [ 688.044345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 688.049757] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 688.054957] RIP: 0033:0x45a6f9 [ 688.058155] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 688.066341] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 688.070399] protocol 88fb is buggy, dev hsr_slave_0 [ 688.073979] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 688.073985] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 18:23:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @local}, 0x8, {0x2, 0x0, @multicast2}, 'bpq0\x00'}) [ 688.073991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 688.073997] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 [ 688.111104] protocol 88fb is buggy, dev hsr_slave_1 18:23:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 688.151895] Bluetooth: hci0 command 0x1001 tx timeout [ 688.157431] Bluetooth: hci0 sending frame failed (-49) [ 688.930342] device bridge_slave_1 left promiscuous mode [ 688.936147] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.971011] device bridge_slave_0 left promiscuous mode [ 688.977015] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.096284] device hsr_slave_1 left promiscuous mode [ 689.143560] device hsr_slave_0 left promiscuous mode [ 689.183457] team0 (unregistering): Port device team_slave_1 removed [ 689.194999] team0 (unregistering): Port device team_slave_0 removed [ 689.205459] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 689.244938] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 689.332963] bond0 (unregistering): Released all slaves [ 690.240271] Bluetooth: hci0 command 0x1009 tx timeout [ 691.670796] device bridge_slave_1 left promiscuous mode [ 691.676952] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.731012] device bridge_slave_0 left promiscuous mode [ 691.736784] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.884669] device hsr_slave_1 left promiscuous mode [ 691.934149] device hsr_slave_0 left promiscuous mode [ 691.974752] team0 (unregistering): Port device team_slave_1 removed [ 691.985969] team0 (unregistering): Port device team_slave_0 removed [ 691.996216] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 692.035199] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 692.111668] bond0 (unregistering): Released all slaves 18:23:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:23:12 executing program 2 (fault-call:8 fault-nth:19): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:23:12 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000017c0)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001800)={0x2c, r2, 0x501, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x10, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, '\xff'}}}}}, 0x2c}}, 0x0) 18:23:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:23:12 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x6000000}, @dev, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x18, 0x3a, 0xffffffffffffffff, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @local, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, [], @local}}}}}}, 0x0) 18:23:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:23:12 executing program 5: unshare(0x6c060000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00\x00\x00\x00\x00\x05\x00', 0x4001}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000700)='dctcp\x00', 0x6) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x16c, 0x4) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14, 0x3e8}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) r3 = socket(0x0, 0xa, 0x7f) sendmmsg$alg(r3, 0x0, 0xd3, 0x800) ioctl(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 18:23:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xe, 0x4, 0x200000004, 0x5}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) [ 694.326462] FAULT_INJECTION: forcing a failure. [ 694.326462] name failslab, interval 1, probability 0, space 0, times 0 [ 694.385236] CPU: 1 PID: 21120 Comm: syz-executor.2 Not tainted 4.14.158-syzkaller #0 [ 694.393350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.402913] Call Trace: [ 694.405532] dump_stack+0x142/0x197 [ 694.409284] should_fail.cold+0x10f/0x159 [ 694.413468] ? __lock_is_held+0xb6/0x140 [ 694.417592] ? mempool_free+0x1d0/0x1d0 [ 694.421755] should_failslab+0xdb/0x130 [ 694.425841] kmem_cache_alloc+0x47/0x780 [ 694.430276] ? mempool_free+0x1d0/0x1d0 [ 694.434271] mempool_alloc_slab+0x47/0x60 [ 694.438618] mempool_alloc+0x138/0x300 [ 694.442651] ? remove_element.isra.0+0x1b0/0x1b0 [ 694.447647] ? lock_downgrade+0x740/0x740 [ 694.452006] ? do_raw_spin_unlock+0x16b/0x260 [ 694.456531] bio_alloc_bioset+0x368/0x680 [ 694.460971] ? bvec_alloc+0x2e0/0x2e0 [ 694.464882] ? _atomic_dec_and_lock+0x66/0xb0 [ 694.469418] blkdev_issue_flush+0xf2/0x330 [ 694.474121] ext4_sync_file+0xa78/0x12d0 [ 694.478566] ? ext4_getfsmap+0x880/0x880 [ 694.482860] vfs_fsync_range+0x10e/0x260 [ 694.487042] ext4_file_write_iter+0x68a/0xe90 [ 694.491752] ? ext4_file_mmap+0x2c0/0x2c0 [ 694.496154] ? trace_hardirqs_on+0x10/0x10 [ 694.500415] ? iov_iter_init+0xaf/0x1d0 [ 694.504416] ? perf_trace_lock_acquire+0x10d/0x4f0 [ 694.509611] __vfs_write+0x4a7/0x6b0 [ 694.513522] ? kernel_read+0x120/0x120 [ 694.517581] ? check_preemption_disabled+0x3c/0x250 [ 694.522715] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 694.528305] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 694.533091] ? __sb_start_write+0x153/0x2f0 [ 694.537440] vfs_write+0x198/0x500 [ 694.540999] SyS_write+0xfd/0x230 [ 694.544536] ? SyS_read+0x230/0x230 [ 694.548174] ? do_syscall_64+0x53/0x640 [ 694.552164] ? SyS_read+0x230/0x230 [ 694.555829] do_syscall_64+0x1e8/0x640 [ 694.559923] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 694.565109] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 694.570469] RIP: 0033:0x45a6f9 [ 694.573665] RSP: 002b:00007f15feed5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 18:23:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:23:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:23:12 executing program 0: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) [ 694.581806] RAX: ffffffffffffffda RBX: 00007f15feed5c90 RCX: 000000000045a6f9 [ 694.589272] RDX: 00000000fffffea6 RSI: 0000000020000000 RDI: 0000000000000004 [ 694.596912] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 694.604651] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f15feed66d4 [ 694.612249] R13: 00000000004cbb77 R14: 00000000004e57d0 R15: 0000000000000007 18:23:12 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:23:12 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000c8d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000030101000000000000000000020000000c00020008000100e0000022"], 0x20}}, 0x0) r0 = socket(0x10, 0x3, 0xc) sendmmsg$alg(r0, &(0x7f0000000140), 0xffffffffffffff68, 0x0) [ 694.841545] IPVS: ftp: loaded support on port[0] = 21 18:23:13 executing program 2 (fault-call:8 fault-nth:20): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:23:13 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 697.591584] IPVS: ftp: loaded support on port[0] = 21 [ 698.476818] chnl_net:caif_netlink_parms(): no params data found [ 698.501276] IPVS: ftp: loaded support on port[0] = 21 [ 698.526374] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.533702] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.541162] device bridge_slave_0 entered promiscuous mode [ 698.556861] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.563790] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.571516] device bridge_slave_1 entered promiscuous mode [ 698.594625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 698.606133] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 698.628493] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 698.636089] team0: Port device team_slave_0 added [ 698.644508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 698.652593] team0: Port device team_slave_1 added [ 698.659324] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 698.668168] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 698.733645] device hsr_slave_0 entered promiscuous mode [ 698.780530] device hsr_slave_1 entered promiscuous mode [ 698.823595] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 698.831701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 698.889526] chnl_net:caif_netlink_parms(): no params data found [ 698.911685] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.918427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.925796] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.933079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.965774] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.973856] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.981930] device bridge_slave_0 entered promiscuous mode [ 698.989542] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.996081] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.003851] device bridge_slave_1 entered promiscuous mode [ 699.022676] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 699.035308] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 699.057509] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 699.065195] team0: Port device team_slave_0 added [ 699.072316] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 699.079535] team0: Port device team_slave_1 added [ 699.085751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 699.093690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 699.153975] device hsr_slave_0 entered promiscuous mode [ 699.200652] device hsr_slave_1 entered promiscuous mode [ 699.256491] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 699.266535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 699.287016] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 699.293781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.304586] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.312747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.319762] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.326425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.338434] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 699.351564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.359103] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.366829] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.376139] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.383835] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.394794] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 699.401016] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.413100] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.423195] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.430133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.458579] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 699.466873] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.474550] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.481226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.489243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.497503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.505739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.513975] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.524330] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 699.533212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.544810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 699.555370] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 699.561875] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 699.578598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.588301] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 699.599929] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 699.608149] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 699.615367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.622455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.632656] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 699.641331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.648557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.657425] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 699.664362] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.674639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 699.685819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.694561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.704286] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.712596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.722073] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 699.731198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.737752] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.746113] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.757133] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.764237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.774823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 699.784852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.796082] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 699.804498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.816560] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 699.824309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.833937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.843352] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.853464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 699.861293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.869735] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.882524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 699.891107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.899109] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.909215] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 699.919580] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.930381] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 699.936613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 699.944739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.953163] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 699.965935] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 699.975527] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 699.982444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.989161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 700.002970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.400279] protocol 88fb is buggy, dev hsr_slave_0 [ 700.405429] protocol 88fb is buggy, dev hsr_slave_1 [ 701.350245] protocol 88fb is buggy, dev hsr_slave_0 [ 701.355597] protocol 88fb is buggy, dev hsr_slave_1 [ 701.440473] protocol 88fb is buggy, dev hsr_slave_0 [ 701.445748] protocol 88fb is buggy, dev hsr_slave_1 [ 701.830351] protocol 88fb is buggy, dev hsr_slave_0 [ 701.835753] protocol 88fb is buggy, dev hsr_slave_1 [ 701.990344] protocol 88fb is buggy, dev hsr_slave_0 [ 701.995710] protocol 88fb is buggy, dev hsr_slave_1 [ 702.050227] device bridge_slave_1 left promiscuous mode [ 702.055919] bridge0: port 2(bridge_slave_1) entered disabled state 18:23:20 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r4, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r7, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 18:23:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) 18:23:20 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="01002e1f0c0000653000186c27151bfc7731b7d3e98594b16034d4af353f8c566fc60d80fa0490cb1ce097b5c4f29d6ad24e75b35b26c0cad9cebff64032ce416b4a6805fac6f3b4e3ec02e44109130c99cfef5a9d877d22580fccd425fb5b93e73841f0738f39ff6e2657"], 0xa) 18:23:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, 0x0, 0xffffff6c) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) 18:23:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8475071") ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000001c0)={0x1, 'ifb0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x41}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x289, &(0x7f0000000080)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a800000000000000000000039000900350002000000000019000500ff800010000000dc13387fd54400009b84093347be7877476b8daa367e89ca0411500c060cec4fabd4", 0x55}], 0x3a6}, 0x0) r1 = socket(0x100000010, 0x200080002, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) 18:23:20 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$ndb(&(0x7f00000002c0)='/dev/nbd#\x00', 0x0, 0x220800) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000300)) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r9, @ANYBLOB="8bf46c04003025c4ef7b96bd6f7c06a437ec01"], 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000400)={0x9, [[0x2, 0x200000, 0x6, 0x6, 0x7, 0x1, 0x2, 0x5], [0x58f4, 0x3, 0x100, 0x5, 0x46, 0x2, 0x0, 0x80000001], [0x1, 0xff, 0xe68c, 0x9, 0x6, 0x6, 0x2, 0x7]], [], [{0x13, 0x8, 0xfb6}, {0xfffffffd, 0x12, 0x10001}, {0x0, 0x20, 0x3}, {0xf3, 0x44, 0x1}, {0x3, 0x2, 0x800}, {0xffffffff, 0x0, 0x3}, {0x400, 0x4, 0xffff8000}, {0x8, 0x532b, 0x7ff}, {0xffff34d3, 0xc6, 0xc0}, {0x3, 0xaa, 0x3}, {0xffff65c3, 0x200, 0x4545}, {0x1, 0xff}], [], 0x28}) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') [ 702.104380] device bridge_slave_0 left promiscuous mode [ 702.110470] bridge0: port 1(bridge_slave_0) entered disabled state 18:23:20 executing program 0 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)=0x2) 18:23:20 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) 18:23:20 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) [ 702.237980] Bluetooth: Unknown HCI packet type 5e [ 702.255311] Bluetooth: Unknown HCI packet type 43 [ 702.264028] FAULT_INJECTION: forcing a failure. [ 702.264028] name failslab, interval 1, probability 0, space 0, times 0 18:23:20 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x10000, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000900)='(', 0x1}], 0x1) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) write$cgroup_pid(r0, &(0x7f0000000000), 0xfffffea6) [ 702.298479] kasan: CONFIG_KASAN_INLINE enabled 18:23:20 executing program 1: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000100)) [ 702.326070] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 702.347655] CPU: 0 PID: 21216 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 702.356218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.365669] Call Trace: [ 702.368265] dump_stack+0x142/0x197 [ 702.371915] should_fail.cold+0x10f/0x159 [ 702.376074] ? avc_has_extended_perms+0xe40/0xe40 [ 702.381025] should_failslab+0xdb/0x130 [ 702.386256] kmem_cache_alloc_node+0x56/0x780 [ 702.390961] ? lock_acquire+0x16f/0x430 [ 702.395198] ? save_trace+0x290/0x290 [ 702.399016] __alloc_skb+0x9c/0x500 [ 702.402654] ? skb_trim+0x180/0x180 [ 702.406533] ll_recv+0x3cf/0x1010 [ 702.410015] hci_uart_tty_receive+0x1f4/0x4d0 [ 702.414658] ? ldsem_down_read+0x33/0x40 [ 702.419002] ? hci_uart_write_work+0x6b0/0x6b0 18:23:20 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5412, &(0x7f0000000100)) [ 702.423671] tty_ioctl+0xded/0x1320 [ 702.427392] ? tty_vhangup+0x30/0x30 [ 702.431120] ? __might_sleep+0x93/0xb0 [ 702.431130] ? __fget+0x210/0x370 [ 702.431143] ? tty_vhangup+0x30/0x30 [ 702.431153] do_vfs_ioctl+0x7ae/0x1060 [ 702.431165] ? selinux_file_mprotect+0x5d0/0x5d0 [ 702.431174] ? lock_downgrade+0x740/0x740 [ 702.431183] ? ioctl_preallocate+0x1c0/0x1c0 [ 702.431193] ? __fget+0x237/0x370 [ 702.431209] ? security_file_ioctl+0x89/0xb0 [ 702.431223] SyS_ioctl+0x8f/0xc0 [ 702.472243] ? do_vfs_ioctl+0x1060/0x1060 [ 702.476413] do_syscall_64+0x1e8/0x640 [ 702.480351] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 702.485218] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 702.490413] RIP: 0033:0x45a6f9 [ 702.493608] RSP: 002b:00007ff439b42c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.501524] RAX: ffffffffffffffda RBX: 00007ff439b42c90 RCX: 000000000045a6f9 [ 702.509070] RDX: 0000000020000100 RSI: 0000000000005412 RDI: 0000000000000003 [ 702.516568] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 702.524023] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff439b436d4 [ 702.531483] R13: 00000000004c5af3 R14: 00000000004dbdb0 R15: 0000000000000004 [ 702.547165] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 702.547982] kobject: 'batman_adv' (ffff8880995d6000): kobject_uevent_env [ 702.553519] Modules linked in: [ 702.553530] CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.158-syzkaller #0 [ 702.553534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.553626] Workqueue: events_unbound flush_to_ldisc [ 702.553634] task: ffff8880a9eb65c0 task.stack: ffff8880a9ec0000 [ 702.553644] RIP: 0010:skb_put+0x31/0x1c0 [ 702.553647] RSP: 0018:ffff8880a9ec7b48 EFLAGS: 00010202 [ 702.553653] RAX: dffffc0000000000 RBX: ffff8880a7965cc0 RCX: 0000000000000000 [ 702.553656] RDX: 0000000000000019 RSI: 0000000000000004 RDI: 0000000000000000 [ 702.553660] RBP: ffff8880a9ec7b70 R08: 0000000000000025 R09: ffff8880a9eb6f00 [ 702.553664] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 702.553668] R13: 0000000000000004 R14: ffff88807dbb44e2 R15: 00000000000000c8 [ 702.553675] FS: 0000000000000000(0000) GS:ffff8880aec00000(0000) knlGS:0000000000000000 [ 702.553679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 702.553682] CR2: 00007f4357642170 CR3: 000000005aae7000 CR4: 00000000001406f0 [ 702.553688] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 702.553692] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 702.553694] Call Trace: [ 702.553705] ll_recv+0x501/0x1010 [ 702.553717] hci_uart_tty_receive+0x1f4/0x4d0 [ 702.553724] ? hci_uart_write_work+0x6b0/0x6b0 [ 702.553730] tty_ldisc_receive_buf+0x14d/0x1a0 [ 702.553739] tty_port_default_receive_buf+0x73/0xa0 [ 702.553747] flush_to_ldisc+0x1ec/0x400 [ 702.553761] process_one_work+0x863/0x1600 [ 702.553774] ? pwq_dec_nr_in_flight+0x2e0/0x2e0 [ 702.553784] worker_thread+0x5d9/0x1050 [ 702.553798] kthread+0x319/0x430 [ 702.553805] ? process_one_work+0x1600/0x1600 [ 702.553810] ? kthread_create_on_node+0xd0/0xd0 [ 702.553820] ret_from_fork+0x24/0x30 [ 702.588465] kobject: 'batman_adv' (ffff8880995d6000): kobject_uevent_env: filter function caused the event to drop! [ 702.592092] Code: 41 56 41 55 41 89 f5 41 54 49 89 fc 4d 8d bc 24 c8 00 00 00 53 e8 40 [ 702.606225] kobject: 'batman_adv' (ffff8880995d6000): kobject_cleanup, parent (null) [ 702.609275] aa 46 fc 4c 89 fa [ 702.639312] kobject: 'batman_adv' (ffff8880995d6000): calling ktype release [ 702.647132] 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 14 02 4c 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 [ 702.647214] RIP: skb_put+0x31/0x1c0 RSP: ffff8880a9ec7b48 [ 702.657298] ---[ end trace 7ce0779a671781b6 ]--- [ 702.703905] kobject: (ffff8880995d6000): dynamic_kobj_release [ 702.707831] Kernel panic - not syncing: Fatal exception [ 702.722267] kobject: 'batman_adv': free name [ 702.728838] Kernel Offset: disabled [ 702.818673] Rebooting in 86400 seconds..