.100610] ? align_vdso_addr+0x60/0x60 [ 451.100619] SyS_mmap+0x16/0x20 [ 451.100628] do_syscall_64+0x1e8/0x640 [ 451.100637] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.110573] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.110581] RIP: 0033:0x459a09 [ 451.110586] RSP: 002b:00007fea3935ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 00:03:27 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="060000000000990892cb20d2fd3587ff0eba4317610000008000000000000404100000000000a8672bc52e42db19e07500090000efffffffdd0118ed34d0fea4cb8f84b2b18edefd93da0ba55878f955cc25bf030ba5ac135d8b19b659c5473904ead56069917cbd2ee633c03d65007eac7437ba5a56074603082bef857f5f92b7f5ecc4f4cc5a645a532f81afee3f68cdb1b782bc95454647e92ded70891326d715176c4b500180789350492dae782db42048a043eb29675d919de108799d8f625a483b9a505e5fe010bdab55f1bc646ad315"]) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2, 0x0, @local}, 0x1b) syz_emit_ethernet(0x46, &(0x7f0000000040)={@broadcast, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x10, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @local, {[@routing={0x0, 0x0, 0x0, 0x2}], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f0000000000)={0x100, 0x9, 0x1}) [ 451.110596] RAX: ffffffffffffffda RBX: 00007fea3935ac90 RCX: 0000000000459a09 [ 451.110601] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 451.110606] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 451.110612] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3935b6d4 [ 451.110616] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 00:03:27 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x200) io_setup(0x3, &(0x7f0000000000)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendfile(r1, r2, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r1, 0x0, 0xffffffff) 00:03:27 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 451.354325] audit: type=1800 audit(1569024207.140:61): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="loop5" ino=3 res=0 00:03:27 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000040)={0xeaaa45157b6d3464, 0x0, {0x1, 0x8, 0x1012, 0x1, 0x8, 0x8, 0x0, 0x3}}) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) 00:03:27 executing program 3 (fault-call:4 fault-nth:79): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 451.449686] audit: type=1804 audit(1569024207.140:62): pid=10763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir928545776/syzkaller.DX0gZN/105/file0/file0" dev="loop5" ino=3 res=1 00:03:27 executing program 4: mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x6100, 0x0) [ 451.559672] FAULT_INJECTION: forcing a failure. [ 451.559672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 451.574974] audit: type=1804 audit(1569024207.200:63): pid=10768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir928545776/syzkaller.DX0gZN/105/file0/file0" dev="loop5" ino=3 res=1 [ 451.601121] CPU: 0 PID: 10775 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 451.609123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.618516] Call Trace: [ 451.621119] dump_stack+0x138/0x197 [ 451.624857] should_fail.cold+0x10f/0x159 [ 451.629014] ? __might_sleep+0x93/0xb0 [ 451.632938] __alloc_pages_nodemask+0x1d6/0x7a0 [ 451.637617] ? __alloc_pages_slowpath+0x2930/0x2930 [ 451.642643] ? __lock_acquire+0x5f7/0x4620 [ 451.646886] ? lock_downgrade+0x6e0/0x6e0 [ 451.646896] ? alloc_set_pte+0xd0f/0x13e0 [ 451.655191] alloc_pages_vma+0xc9/0x4c0 [ 451.659178] __handle_mm_fault+0xd5d/0x3470 [ 451.663519] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 451.668265] ? find_held_lock+0x35/0x130 [ 451.668275] ? handle_mm_fault+0x1b6/0x7c0 [ 451.668294] handle_mm_fault+0x293/0x7c0 [ 451.680643] __get_user_pages+0x465/0x1220 [ 451.684900] ? follow_page_mask+0x1560/0x1560 [ 451.689410] ? memset+0x32/0x40 [ 451.692693] populate_vma_page_range+0x18e/0x230 [ 451.692706] __mm_populate+0x198/0x2c0 [ 451.701386] ? populate_vma_page_range+0x230/0x230 [ 451.706420] vm_mmap_pgoff+0x1be/0x1d0 [ 451.706434] ? vma_is_stack_for_current+0xa0/0xa0 [ 451.715331] ? __fget+0x237/0x370 [ 451.718815] SyS_mmap_pgoff+0x3ca/0x520 [ 451.723071] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 451.728951] ? do_syscall_64+0x53/0x640 [ 451.728960] ? align_vdso_addr+0x60/0x60 [ 451.728972] SyS_mmap+0x16/0x20 [ 451.740383] do_syscall_64+0x1e8/0x640 [ 451.744278] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.749135] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 451.754324] RIP: 0033:0x459a09 [ 451.757518] RSP: 002b:00007fea3935ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 451.757529] RAX: ffffffffffffffda RBX: 00007fea3935ac90 RCX: 0000000000459a09 [ 451.757534] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 451.757539] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 451.757546] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3935b6d4 [ 451.795470] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 00:03:27 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0xc, 0x28001) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000000c0)={0x0, 0x0, 0x0, {0x0, 0x100000000000001}, {0x53, 0x2}, @ramp}) write$evdev(r0, &(0x7f0000000040), 0xc0) [ 452.111303] audit: type=1804 audit(1569024207.900:64): pid=10768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir928545776/syzkaller.DX0gZN/105/file0/file0" dev="loop5" ino=3 res=1 [ 452.180252] audit: type=1804 audit(1569024207.900:65): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir928545776/syzkaller.DX0gZN/105/file0/file0" dev="loop5" ino=3 res=1 [ 452.269016] audit: type=1804 audit(1569024207.900:66): pid=10786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir928545776/syzkaller.DX0gZN/105/file0/file0" dev="loop5" ino=3 res=1 [ 455.061341] IPVS: ftp: loaded support on port[0] = 21 [ 455.843862] IPVS: ftp: loaded support on port[0] = 21 [ 455.857524] chnl_net:caif_netlink_parms(): no params data found [ 455.893573] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.900174] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.907429] device bridge_slave_0 entered promiscuous mode [ 455.914609] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.921213] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.928184] device bridge_slave_1 entered promiscuous mode [ 455.958292] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 455.973566] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.000627] IPVS: ftp: loaded support on port[0] = 21 [ 456.012512] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 456.019655] team0: Port device team_slave_0 added [ 456.025848] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 456.033109] team0: Port device team_slave_1 added [ 456.038796] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 456.049563] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 456.112725] device hsr_slave_0 entered promiscuous mode [ 456.160545] device hsr_slave_1 entered promiscuous mode [ 456.246413] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 456.277096] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 456.306530] chnl_net:caif_netlink_parms(): no params data found [ 456.347796] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.354220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.360875] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.367205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.447253] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.454420] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.466527] device bridge_slave_0 entered promiscuous mode [ 456.477054] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.488669] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.496034] device bridge_slave_1 entered promiscuous mode [ 456.527922] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 456.537512] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.550097] chnl_net:caif_netlink_parms(): no params data found [ 456.579077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 456.586381] team0: Port device team_slave_0 added [ 456.600577] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 456.607725] team0: Port device team_slave_1 added [ 456.620007] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 456.633144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 456.647512] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.655453] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.663976] device bridge_slave_0 entered promiscuous mode [ 456.671457] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.678807] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.686082] device bridge_slave_1 entered promiscuous mode [ 456.719220] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 456.725787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.733236] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 456.750585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 456.770624] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 456.777673] team0: Port device team_slave_0 added [ 456.784075] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 456.791265] team0: Port device team_slave_1 added [ 456.844095] device hsr_slave_0 entered promiscuous mode [ 456.900367] device hsr_slave_1 entered promiscuous mode [ 456.940567] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 456.954912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 456.961927] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.968701] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.975906] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 456.985849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 456.992846] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 456.999979] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 457.013430] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 457.074184] device hsr_slave_0 entered promiscuous mode [ 457.120417] device hsr_slave_1 entered promiscuous mode [ 457.160392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.167318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.176607] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 457.183059] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.191189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 457.206574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 457.216837] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 457.228706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 457.237788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.245919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.254003] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.260386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.268559] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 457.284580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 457.293084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.301744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.309274] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.315650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.327298] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 457.347861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.359346] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 457.370285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 457.384286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.393259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.401198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.410406] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 457.419624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 457.429776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.436991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.445069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.452724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.462200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.471193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 457.479658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.490687] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 457.496914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 457.511916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 457.519494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 457.536889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.553890] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 457.562714] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 457.573868] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 457.583110] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 457.589212] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.596325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.603805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.616837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.630935] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 457.641586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 457.651950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 457.658917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.667007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.674991] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.681376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.688472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.696651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.704287] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.710654] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.717693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.727845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.737814] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 457.745869] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.765379] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 457.773716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.784259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 457.793224] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 457.800459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.808098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 457.816323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 457.823547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 457.836789] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 457.844225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 457.852038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 457.859728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 457.869044] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 457.875487] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.884841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 457.892831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 457.901735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 457.909295] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.915691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.923308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.932438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 457.943785] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 457.951017] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 457.958624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 457.967642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.975422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.983459] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.989960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.999312] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 458.017481] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 458.038035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.046727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.054739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 458.065009] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 458.072134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.079856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 458.102089] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 458.114236] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.122457] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:33 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 458.147966] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 458.159400] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 458.176853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 458.188963] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.197016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.207088] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 458.219199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.227386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.236158] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 458.254633] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.262690] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.271929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.281055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 458.289305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.299941] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 458.306098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 458.317836] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.326245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.339105] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 458.358145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.030540] device bridge_slave_1 left promiscuous mode [ 459.036237] bridge0: port 2(bridge_slave_1) entered disabled state 00:03:34 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:03:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_MARK={0x8, 0x8}]}, 0x24}}, 0x0) 00:03:34 executing program 3 (fault-call:4 fault-nth:80): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:03:34 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x101, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x84801, 0x0) 00:03:34 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 459.101185] device bridge_slave_0 left promiscuous mode [ 459.106757] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:34 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 459.166353] device bridge_slave_1 left promiscuous mode [ 459.173911] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.214122] FAULT_INJECTION: forcing a failure. [ 459.214122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 459.231438] device bridge_slave_0 left promiscuous mode [ 459.238820] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.266615] CPU: 1 PID: 10839 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 459.273686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.283060] Call Trace: [ 459.285681] dump_stack+0x138/0x197 [ 459.289328] should_fail.cold+0x10f/0x159 [ 459.293575] ? __might_sleep+0x93/0xb0 [ 459.297479] __alloc_pages_nodemask+0x1d6/0x7a0 [ 459.302159] ? __alloc_pages_slowpath+0x2930/0x2930 [ 459.307195] ? __lock_acquire+0x5f7/0x4620 [ 459.311445] ? lock_downgrade+0x6e0/0x6e0 [ 459.315598] ? alloc_set_pte+0xd0f/0x13e0 [ 459.319762] alloc_pages_vma+0xc9/0x4c0 [ 459.323751] __handle_mm_fault+0xd5d/0x3470 [ 459.328085] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 459.332849] ? find_held_lock+0x35/0x130 [ 459.336916] ? handle_mm_fault+0x1b6/0x7c0 [ 459.341172] handle_mm_fault+0x293/0x7c0 [ 459.345242] __get_user_pages+0x465/0x1220 [ 459.349490] ? follow_page_mask+0x1560/0x1560 [ 459.354128] ? memset+0x32/0x40 [ 459.357423] populate_vma_page_range+0x18e/0x230 [ 459.362191] __mm_populate+0x198/0x2c0 [ 459.366094] ? populate_vma_page_range+0x230/0x230 [ 459.371041] vm_mmap_pgoff+0x1be/0x1d0 [ 459.374942] ? vma_is_stack_for_current+0xa0/0xa0 [ 459.379787] ? __fget+0x237/0x370 [ 459.383252] SyS_mmap_pgoff+0x3ca/0x520 [ 459.387266] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 459.392206] ? do_syscall_64+0x53/0x640 [ 459.396188] ? align_vdso_addr+0x60/0x60 [ 459.400253] SyS_mmap+0x16/0x20 [ 459.403536] do_syscall_64+0x1e8/0x640 [ 459.407426] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 459.412281] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 459.417478] RIP: 0033:0x459a09 [ 459.420678] RSP: 002b:00007fea39339c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 459.428392] RAX: ffffffffffffffda RBX: 00007fea39339c90 RCX: 0000000000459a09 [ 459.435668] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 459.442945] RBP: 000000000075bfc8 R08: 0000000000000003 R09: 0000000000000000 [ 459.450225] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3933a6d4 [ 459.457503] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 [ 459.497511] device bridge_slave_1 left promiscuous mode [ 459.504960] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.574504] device bridge_slave_0 left promiscuous mode [ 459.584277] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.782965] device hsr_slave_1 left promiscuous mode [ 459.835080] device hsr_slave_0 left promiscuous mode [ 459.894273] team0 (unregistering): Port device team_slave_1 removed [ 459.904467] team0 (unregistering): Port device team_slave_0 removed [ 459.915174] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 459.958931] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 460.006938] bond0 (unregistering): Released all slaves [ 460.082081] device hsr_slave_1 left promiscuous mode [ 460.124500] device hsr_slave_0 left promiscuous mode [ 460.163181] team0 (unregistering): Port device team_slave_1 removed [ 460.174489] team0 (unregistering): Port device team_slave_0 removed [ 460.183973] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 460.233097] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 460.324084] bond0 (unregistering): Released all slaves [ 460.403625] device hsr_slave_1 left promiscuous mode [ 460.444009] device hsr_slave_0 left promiscuous mode [ 460.484718] team0 (unregistering): Port device team_slave_1 removed [ 460.496040] team0 (unregistering): Port device team_slave_0 removed [ 460.506105] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 460.544640] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 460.653470] bond0 (unregistering): Released all slaves 00:03:36 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:36 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:36 executing program 3 (fault-call:4 fault-nth:81): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 460.761630] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.768166] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.781757] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.788271] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xddff83e236179283, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x7}}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r4, 0x909, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'', 0xa, 'vcan0\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0840240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010491}, 0x200000c0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r5 = syz_open_dev$sndseq(&(0x7f00000007c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) 00:03:36 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 460.850691] FAULT_INJECTION: forcing a failure. [ 460.850691] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 460.911726] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.920293] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.929337] CPU: 1 PID: 10849 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 460.936418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.945782] Call Trace: [ 460.948385] dump_stack+0x138/0x197 [ 460.952032] should_fail.cold+0x10f/0x159 [ 460.956192] ? __might_sleep+0x93/0xb0 [ 460.960096] __alloc_pages_nodemask+0x1d6/0x7a0 [ 460.964767] ? __alloc_pages_slowpath+0x2930/0x2930 [ 460.969878] ? __lock_acquire+0x5f7/0x4620 [ 460.974124] ? lock_downgrade+0x6e0/0x6e0 [ 460.978278] ? alloc_set_pte+0xd0f/0x13e0 [ 460.982435] alloc_pages_vma+0xc9/0x4c0 [ 460.986417] __handle_mm_fault+0xd5d/0x3470 [ 460.990762] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 460.995521] ? find_held_lock+0x35/0x130 [ 460.999588] ? handle_mm_fault+0x1b6/0x7c0 [ 461.003838] handle_mm_fault+0x293/0x7c0 [ 461.007920] __get_user_pages+0x465/0x1220 [ 461.012170] ? follow_page_mask+0x1560/0x1560 [ 461.016673] ? memset+0x32/0x40 [ 461.020044] populate_vma_page_range+0x18e/0x230 [ 461.024808] __mm_populate+0x198/0x2c0 [ 461.028720] ? populate_vma_page_range+0x230/0x230 [ 461.033660] vm_mmap_pgoff+0x1be/0x1d0 [ 461.037559] ? vma_is_stack_for_current+0xa0/0xa0 [ 461.042433] ? __fget+0x237/0x370 [ 461.045901] SyS_mmap_pgoff+0x3ca/0x520 [ 461.049884] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 461.054829] ? do_syscall_64+0x53/0x640 [ 461.058807] ? align_vdso_addr+0x60/0x60 [ 461.062875] SyS_mmap+0x16/0x20 [ 461.066161] do_syscall_64+0x1e8/0x640 [ 461.070316] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 461.075196] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 461.080385] RIP: 0033:0x459a09 [ 461.083578] RSP: 002b:00007fea3935ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 461.091292] RAX: ffffffffffffffda RBX: 00007fea3935ac90 RCX: 0000000000459a09 [ 461.098584] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 461.105859] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 461.113136] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3935b6d4 [ 461.120412] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 00:03:36 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:36 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xddff83e236179283, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, 0x7}}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x30, r4, 0x909, 0x0, 0x0, {{}, 0x0, 0x4101, 0x0, {0x14, 0x17, {0x0, 0x0, @l2={'', 0xa, 'vcan0\x00'}}}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc0840240}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010491}, 0x200000c0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r5 = syz_open_dev$sndseq(&(0x7f00000007c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, 0x0) 00:03:37 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:37 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:37 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 464.481617] IPVS: ftp: loaded support on port[0] = 21 [ 465.418801] chnl_net:caif_netlink_parms(): no params data found [ 465.455416] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.462548] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.463220] IPVS: ftp: loaded support on port[0] = 21 [ 465.479385] device bridge_slave_0 entered promiscuous mode [ 465.488553] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.495107] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.502476] device bridge_slave_1 entered promiscuous mode [ 465.535316] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 465.544574] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 465.571075] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 465.578178] team0: Port device team_slave_0 added [ 465.586294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 465.593609] team0: Port device team_slave_1 added [ 465.603308] IPVS: ftp: loaded support on port[0] = 21 [ 465.615710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 465.623486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 465.722442] device hsr_slave_0 entered promiscuous mode [ 465.760501] device hsr_slave_1 entered promiscuous mode [ 465.849207] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 465.858668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 465.871336] chnl_net:caif_netlink_parms(): no params data found [ 465.893793] IPVS: ftp: loaded support on port[0] = 21 [ 465.925878] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.932285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.938870] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.945258] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.035265] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.042090] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.049463] device bridge_slave_0 entered promiscuous mode [ 466.056708] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.063170] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.070369] device bridge_slave_1 entered promiscuous mode [ 466.098837] chnl_net:caif_netlink_parms(): no params data found [ 466.118622] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 466.147749] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 466.188888] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 466.197084] team0: Port device team_slave_0 added [ 466.203001] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 466.214593] team0: Port device team_slave_1 added [ 466.220759] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 466.228094] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 466.247221] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.253760] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.261082] device bridge_slave_0 entered promiscuous mode [ 466.322816] device hsr_slave_0 entered promiscuous mode [ 466.355156] device hsr_slave_1 entered promiscuous mode [ 466.400743] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 466.410901] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.417254] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.430767] device bridge_slave_1 entered promiscuous mode [ 466.448031] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.454901] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.466571] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 466.491369] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 466.511184] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 466.537825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 466.564175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.594140] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 466.601813] team0: Port device team_slave_0 added [ 466.609076] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 466.619397] chnl_net:caif_netlink_parms(): no params data found [ 466.630998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 466.638175] team0: Port device team_slave_1 added [ 466.643783] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 466.656292] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 466.669590] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 466.684558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.691820] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.708199] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 466.715595] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.762447] device hsr_slave_0 entered promiscuous mode [ 466.800491] device hsr_slave_1 entered promiscuous mode [ 466.851993] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 466.865414] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.877450] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.885196] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.891547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.906010] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 466.913509] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 466.931402] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.937799] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.949345] device bridge_slave_0 entered promiscuous mode [ 466.956709] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 466.968371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.982068] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.988480] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.995683] device bridge_slave_1 entered promiscuous mode [ 467.008658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.016847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.024514] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.031018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.041965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 467.051739] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 467.065331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 467.072871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.082056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 467.090409] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 467.102550] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 467.115358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.124021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.130986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.138679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 467.156309] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 467.162968] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.185348] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 467.192490] team0: Port device team_slave_0 added [ 467.198409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 467.208483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.217583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.225680] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 467.233329] team0: Port device team_slave_1 added [ 467.239117] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 467.247693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 467.262055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.269072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.276962] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.284716] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.291118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.298146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.306534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.314505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 467.324210] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 467.333904] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 467.342568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.349748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.357721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.378721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 467.387252] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 467.400912] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.408476] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.419422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.427485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 467.435950] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.442368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.492510] device hsr_slave_0 entered promiscuous mode [ 467.530434] device hsr_slave_1 entered promiscuous mode [ 467.577591] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 467.589502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.600713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.607238] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 467.614321] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 467.628822] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 467.643957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 467.655750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.665342] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 467.674757] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 467.684198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.704511] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.712225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.720306] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.728721] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 467.739932] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 467.747647] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 467.761543] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 467.774031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.782146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.789591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.797224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.804662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 467.811865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 467.825907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 467.832317] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.844327] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 467.858957] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 467.868983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.880732] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 467.886817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.894282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 467.904265] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 467.912310] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.918752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.925935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 467.933879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 467.941794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.950539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 467.969616] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 467.986396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 467.996762] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 468.004854] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.011368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 468.026672] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 468.036754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 468.045849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 468.054249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 468.062950] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.071336] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:43 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:43 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:43 executing program 3 (fault-call:4 fault-nth:82): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 468.106459] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 468.116912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.156539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 468.167666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 468.185962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 468.207662] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 468.221593] FAULT_INJECTION: forcing a failure. [ 468.221593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.234182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 468.242403] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 468.249613] CPU: 0 PID: 10879 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 468.256631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.266079] Call Trace: [ 468.268679] dump_stack+0x138/0x197 [ 468.272327] should_fail.cold+0x10f/0x159 [ 468.276489] ? __might_sleep+0x93/0xb0 [ 468.280390] __alloc_pages_nodemask+0x1d6/0x7a0 [ 468.285073] ? __alloc_pages_slowpath+0x2930/0x2930 [ 468.290119] ? __lock_acquire+0x5f7/0x4620 [ 468.294375] ? lock_downgrade+0x6e0/0x6e0 [ 468.298532] ? alloc_set_pte+0xd0f/0x13e0 [ 468.302884] alloc_pages_vma+0xc9/0x4c0 [ 468.306887] __handle_mm_fault+0xd5d/0x3470 [ 468.311233] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 468.316175] ? find_held_lock+0x35/0x130 [ 468.320247] ? handle_mm_fault+0x1b6/0x7c0 [ 468.324501] handle_mm_fault+0x293/0x7c0 [ 468.328593] __get_user_pages+0x465/0x1220 [ 468.332853] ? follow_page_mask+0x1560/0x1560 [ 468.337366] ? memset+0x32/0x40 [ 468.340662] populate_vma_page_range+0x18e/0x230 [ 468.345440] __mm_populate+0x198/0x2c0 [ 468.349369] ? populate_vma_page_range+0x230/0x230 [ 468.354312] vm_mmap_pgoff+0x1be/0x1d0 [ 468.358216] ? vma_is_stack_for_current+0xa0/0xa0 [ 468.363087] ? __fget+0x237/0x370 [ 468.366735] SyS_mmap_pgoff+0x3ca/0x520 [ 468.370720] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 468.375674] ? do_syscall_64+0x53/0x640 [ 468.379672] ? align_vdso_addr+0x60/0x60 [ 468.383779] SyS_mmap+0x16/0x20 [ 468.387066] do_syscall_64+0x1e8/0x640 [ 468.390962] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.395820] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 468.401019] RIP: 0033:0x459a09 [ 468.404227] RSP: 002b:00007fea3935ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 468.411946] RAX: ffffffffffffffda RBX: 00007fea3935ac90 RCX: 0000000000459a09 [ 468.419224] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 468.426502] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 468.433814] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3935b6d4 [ 468.441092] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 [ 468.461987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.469171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 468.502482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 468.520586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 468.530834] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 00:03:44 executing program 3 (fault-call:4 fault-nth:83): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 468.548162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 468.559192] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.569572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.598889] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 468.617485] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 468.624244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:03:44 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 468.664982] FAULT_INJECTION: forcing a failure. [ 468.664982] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 468.697478] CPU: 0 PID: 10890 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 468.704542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 468.713904] Call Trace: [ 468.716509] dump_stack+0x138/0x197 [ 468.720144] should_fail.cold+0x10f/0x159 [ 468.724285] ? __might_sleep+0x93/0xb0 [ 468.728175] __alloc_pages_nodemask+0x1d6/0x7a0 [ 468.732835] ? __alloc_pages_slowpath+0x2930/0x2930 [ 468.737847] ? __lock_acquire+0x5f7/0x4620 [ 468.742073] ? lock_downgrade+0x6e0/0x6e0 [ 468.746221] ? alloc_set_pte+0xd0f/0x13e0 [ 468.750357] alloc_pages_vma+0xc9/0x4c0 [ 468.754328] __handle_mm_fault+0xd5d/0x3470 [ 468.758640] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 468.763389] ? find_held_lock+0x35/0x130 [ 468.767543] ? handle_mm_fault+0x1b6/0x7c0 [ 468.771772] handle_mm_fault+0x293/0x7c0 [ 468.775823] __get_user_pages+0x465/0x1220 [ 468.780047] ? follow_page_mask+0x1560/0x1560 [ 468.784538] ? memset+0x32/0x40 [ 468.787806] populate_vma_page_range+0x18e/0x230 [ 468.792551] __mm_populate+0x198/0x2c0 [ 468.796426] ? populate_vma_page_range+0x230/0x230 [ 468.801345] vm_mmap_pgoff+0x1be/0x1d0 [ 468.805228] ? vma_is_stack_for_current+0xa0/0xa0 [ 468.810053] ? __fget+0x237/0x370 [ 468.813495] SyS_mmap_pgoff+0x3ca/0x520 [ 468.817465] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 468.822383] ? do_syscall_64+0x53/0x640 [ 468.826342] ? align_vdso_addr+0x60/0x60 [ 468.830389] SyS_mmap+0x16/0x20 [ 468.833651] do_syscall_64+0x1e8/0x640 [ 468.837635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.842496] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 468.847778] RIP: 0033:0x459a09 [ 468.850960] RSP: 002b:00007fea39339c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 468.858829] RAX: ffffffffffffffda RBX: 00007fea39339c90 RCX: 0000000000459a09 [ 468.866091] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 468.873354] RBP: 000000000075bfc8 R08: 0000000000000003 R09: 0000000000000000 [ 468.880605] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3933a6d4 [ 468.887859] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 [ 468.898750] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 468.908299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 00:03:44 executing program 3 (fault-call:4 fault-nth:84): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 468.918464] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 468.929653] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.940742] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.950264] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:44 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 469.005519] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 469.041252] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 00:03:44 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 469.062950] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.071973] FAULT_INJECTION: forcing a failure. [ 469.071973] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 469.092710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.107656] CPU: 1 PID: 10894 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 469.108380] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.114703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.114709] Call Trace: [ 469.114728] dump_stack+0x138/0x197 [ 469.114747] should_fail.cold+0x10f/0x159 [ 469.114758] ? __might_sleep+0x93/0xb0 [ 469.114772] __alloc_pages_nodemask+0x1d6/0x7a0 [ 469.114786] ? __alloc_pages_slowpath+0x2930/0x2930 [ 469.121174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.130452] ? __lock_acquire+0x5f7/0x4620 [ 469.130467] ? lock_downgrade+0x6e0/0x6e0 [ 469.130477] ? alloc_set_pte+0xd0f/0x13e0 [ 469.147585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.149324] alloc_pages_vma+0xc9/0x4c0 [ 469.160992] __handle_mm_fault+0xd5d/0x3470 [ 469.161005] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 469.161016] ? find_held_lock+0x35/0x130 [ 469.161024] ? handle_mm_fault+0x1b6/0x7c0 [ 469.161044] handle_mm_fault+0x293/0x7c0 [ 469.161058] __get_user_pages+0x465/0x1220 [ 469.161075] ? follow_page_mask+0x1560/0x1560 [ 469.161089] ? memset+0x32/0x40 [ 469.161101] populate_vma_page_range+0x18e/0x230 [ 469.221734] __mm_populate+0x198/0x2c0 [ 469.225633] ? populate_vma_page_range+0x230/0x230 [ 469.230574] vm_mmap_pgoff+0x1be/0x1d0 [ 469.234467] ? vma_is_stack_for_current+0xa0/0xa0 [ 469.239333] ? __fget+0x237/0x370 [ 469.242797] SyS_mmap_pgoff+0x3ca/0x520 [ 469.246779] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 469.251716] ? do_syscall_64+0x53/0x640 [ 469.255692] ? align_vdso_addr+0x60/0x60 [ 469.259752] SyS_mmap+0x16/0x20 [ 469.263033] do_syscall_64+0x1e8/0x640 [ 469.266927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.271782] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 469.276973] RIP: 0033:0x459a09 [ 469.280161] RSP: 002b:00007fea3935ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 469.287961] RAX: ffffffffffffffda RBX: 00007fea3935ac90 RCX: 0000000000459a09 [ 469.295248] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 469.302529] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 469.309808] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3935b6d4 [ 469.317085] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 [ 469.336485] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 469.348353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 469.359957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 469.379728] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 469.392861] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.399279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.422207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 469.455588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 469.475458] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 469.499835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 469.516954] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 469.544801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 469.559145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 469.590265] Bearer < [ 469.590265] vcan0> rejected, not supported in standalone mode [ 469.599133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 469.617234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 469.634561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 469.644930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 469.672541] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 00:03:45 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:03:45 executing program 3 (fault-call:4 fault-nth:85): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 469.689440] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 469.720672] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 469.728279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 469.746548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 469.772299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 469.789431] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 469.797983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 469.828974] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.837886] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.851879] FAULT_INJECTION: forcing a failure. [ 469.851879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 469.885999] CPU: 1 PID: 10911 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 469.890990] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 469.893060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.893066] Call Trace: [ 469.893083] dump_stack+0x138/0x197 [ 469.893101] should_fail.cold+0x10f/0x159 [ 469.893114] ? __might_sleep+0x93/0xb0 [ 469.917712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.918969] __alloc_pages_nodemask+0x1d6/0x7a0 [ 469.918984] ? __alloc_pages_slowpath+0x2930/0x2930 [ 469.928919] ? __lock_acquire+0x5f7/0x4620 [ 469.928941] alloc_pages_vma+0xc9/0x4c0 [ 469.928955] __handle_mm_fault+0xd5d/0x3470 [ 469.951145] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 469.955913] ? find_held_lock+0x35/0x130 [ 469.959985] ? handle_mm_fault+0x1b6/0x7c0 [ 469.964234] handle_mm_fault+0x293/0x7c0 [ 469.968312] __get_user_pages+0x465/0x1220 [ 469.972561] ? follow_page_mask+0x1560/0x1560 [ 469.977068] ? memset+0x32/0x40 [ 469.980381] populate_vma_page_range+0x18e/0x230 [ 469.985132] __mm_populate+0x198/0x2c0 [ 469.989003] ? populate_vma_page_range+0x230/0x230 [ 469.993922] vm_mmap_pgoff+0x1be/0x1d0 [ 469.997915] ? vma_is_stack_for_current+0xa0/0xa0 [ 470.002748] ? __fget+0x237/0x370 [ 470.006198] SyS_mmap_pgoff+0x3ca/0x520 [ 470.010164] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 470.015083] ? do_syscall_64+0x53/0x640 [ 470.019042] ? align_vdso_addr+0x60/0x60 [ 470.023097] SyS_mmap+0x16/0x20 [ 470.026367] do_syscall_64+0x1e8/0x640 [ 470.030243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.035169] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 470.040351] RIP: 0033:0x459a09 [ 470.043533] RSP: 002b:00007fea39339c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 470.051245] RAX: ffffffffffffffda RBX: 00007fea39339c90 RCX: 0000000000459a09 [ 470.058508] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 470.065762] RBP: 000000000075bfc8 R08: 0000000000000003 R09: 0000000000000000 [ 470.073108] R10: 0000000000008012 R11: 0000000000000246 R12: 00007fea3933a6d4 [ 470.080376] R13: 00000000004c5eec R14: 00000000004dab20 R15: 0000000000000005 00:03:46 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:46 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 470.375873] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.383872] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.420438] device bridge_slave_1 left promiscuous mode [ 471.425944] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.480752] device bridge_slave_0 left promiscuous mode [ 471.486348] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.541100] device bridge_slave_1 left promiscuous mode [ 471.546564] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.610914] device bridge_slave_0 left promiscuous mode [ 471.616529] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.682161] device bridge_slave_1 left promiscuous mode [ 471.687903] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.731021] device bridge_slave_0 left promiscuous mode [ 471.736610] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.781858] device bridge_slave_1 left promiscuous mode [ 471.788862] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.841550] device bridge_slave_0 left promiscuous mode [ 471.847124] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.911501] device bridge_slave_1 left promiscuous mode [ 471.917074] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.961147] device bridge_slave_0 left promiscuous mode [ 471.966681] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.163467] device hsr_slave_1 left promiscuous mode [ 472.204151] device hsr_slave_0 left promiscuous mode [ 472.245022] team0 (unregistering): Port device team_slave_1 removed [ 472.255294] team0 (unregistering): Port device team_slave_0 removed [ 472.265041] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 472.314488] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 472.383874] bond0 (unregistering): Released all slaves [ 472.492818] device hsr_slave_1 left promiscuous mode [ 472.533571] device hsr_slave_0 left promiscuous mode [ 472.573019] team0 (unregistering): Port device team_slave_1 removed [ 472.583716] team0 (unregistering): Port device team_slave_0 removed [ 472.593032] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 472.645122] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 472.725224] bond0 (unregistering): Released all slaves [ 472.832012] device hsr_slave_1 left promiscuous mode [ 472.884294] device hsr_slave_0 left promiscuous mode [ 472.932932] team0 (unregistering): Port device team_slave_1 removed [ 472.943383] team0 (unregistering): Port device team_slave_0 removed [ 472.952585] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.004859] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.083775] bond0 (unregistering): Released all slaves [ 473.202008] device hsr_slave_1 left promiscuous mode [ 473.242754] device hsr_slave_0 left promiscuous mode [ 473.284517] team0 (unregistering): Port device team_slave_1 removed [ 473.297026] team0 (unregistering): Port device team_slave_0 removed [ 473.306658] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.344499] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.404373] bond0 (unregistering): Released all slaves [ 473.502808] device hsr_slave_1 left promiscuous mode [ 473.545236] device hsr_slave_0 left promiscuous mode [ 473.604205] team0 (unregistering): Port device team_slave_1 removed [ 473.614243] team0 (unregistering): Port device team_slave_0 removed [ 473.623547] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 473.675154] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 473.753632] bond0 (unregistering): Released all slaves [ 478.671373] IPVS: ftp: loaded support on port[0] = 21 [ 479.681626] IPVS: ftp: loaded support on port[0] = 21 [ 479.692033] chnl_net:caif_netlink_parms(): no params data found [ 479.748437] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.755064] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.762370] device bridge_slave_0 entered promiscuous mode [ 479.772100] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.778498] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.787355] device bridge_slave_1 entered promiscuous mode [ 479.807330] IPVS: ftp: loaded support on port[0] = 21 [ 479.824858] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 479.833765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 479.867543] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 479.875863] team0: Port device team_slave_0 added [ 479.883683] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 479.891335] team0: Port device team_slave_1 added [ 479.898710] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 479.917612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 480.033884] device hsr_slave_0 entered promiscuous mode [ 480.070445] device hsr_slave_1 entered promiscuous mode [ 480.110414] chnl_net:caif_netlink_parms(): no params data found [ 480.119137] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 480.142308] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 480.229367] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.235823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.242529] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.248903] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.264556] chnl_net:caif_netlink_parms(): no params data found [ 480.311724] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 480.317847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.329879] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.337924] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.349003] device bridge_slave_0 entered promiscuous mode [ 480.358316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 480.366066] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.372921] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.387064] device bridge_slave_1 entered promiscuous mode [ 480.427476] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 480.435158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 480.442674] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.449397] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.457455] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.463905] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.471130] device bridge_slave_0 entered promiscuous mode [ 480.478292] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 480.488169] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 480.494655] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.501428] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.507815] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.517952] device bridge_slave_1 entered promiscuous mode [ 480.557449] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 480.564817] team0: Port device team_slave_0 added [ 480.571523] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 480.579283] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 480.587145] team0: Port device team_slave_1 added [ 480.598453] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 480.612056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 480.619645] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.626083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.632858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 480.640878] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.647220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.656169] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 480.664493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 480.688312] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 480.705257] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 480.714275] team0: Port device team_slave_0 added [ 480.720441] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 480.734252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 480.741826] team0: Port device team_slave_1 added [ 480.747044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 480.754612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 480.764643] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 480.823841] device hsr_slave_0 entered promiscuous mode [ 480.860409] device hsr_slave_1 entered promiscuous mode [ 480.907077] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 480.914648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 480.922425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 480.932434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 480.939498] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 480.953138] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 480.962077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 480.969605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 480.987879] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 480.995997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 481.006065] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 481.072726] device hsr_slave_0 entered promiscuous mode [ 481.110430] device hsr_slave_1 entered promiscuous mode [ 481.150683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.158228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.166081] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 481.173772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 481.187225] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 481.193717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 481.202304] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 481.214896] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 481.228824] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 481.245916] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 481.256687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.276168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 481.312881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.325999] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 481.335653] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 481.346454] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 481.352751] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.366145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.373432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.391352] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 481.401289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.409035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.417408] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.423844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.432032] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 481.441863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 481.464667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 481.472763] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 481.481463] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.487879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.497601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 481.507430] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.515306] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:57 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:57 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 481.539847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.552082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 481.567580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 481.575490] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 00:03:57 executing program 3 (fault-call:4 fault-nth:86): r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:03:57 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 481.583794] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 481.602013] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 481.615061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 481.628825] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 481.637242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 481.649304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 481.658534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 481.675493] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 481.686307] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.697084] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 481.725240] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 481.735747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready 00:03:57 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='\xe0\x1b\xedu\x02\x8b\xe7\xb0\xff\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000040)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 481.768382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 481.808402] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 00:03:57 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 481.818662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 481.863107] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 481.878810] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 481.902911] bridge0: port 1(bridge_slave_0) entered blocking state 00:03:57 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 481.909345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.946741] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 481.967130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 481.995817] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 482.015735] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 482.030176] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 482.047940] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 482.069478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 482.081669] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.088084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.107909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.131156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.152809] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 482.171597] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 482.177722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.214229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 482.232895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 482.241174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 482.273275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 482.295005] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 482.312467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 482.320822] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 482.341217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 482.361418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.368207] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 482.386900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 482.415478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 482.437988] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 482.459938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 482.476030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 482.503143] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 482.513036] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 482.520909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 482.531886] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 482.538081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 482.554665] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 482.568678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.189313] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.197284] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.255253] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.264951] bridge0: port 1(bridge_slave_0) entered disabled state 00:03:59 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:03:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") bind$llc(r4, &(0x7f0000000000)={0x1a, 0x309, 0x3, 0x7ae, 0x4, 0x0, @random="eeb9f1002ee4"}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req={0xe49, 0xe6, 0xe28a, 0x3}, 0x10) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x1, &(0x7f0000ffb000/0x3000)=nil, 0x4) 00:03:59 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:03:59 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="149bc3713440637a9ff2b19e000000", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x8012, r2, 0x200000000000000) 00:03:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="4d107c2e60696f6de9d67086d04b10d3e17075fd78d8480140ff3b00e4edd5bb2748a258d8384a929efa27851b2f784763eadf293a1b390ba0ee8c1fc85dafe5b13b841aa23a44bcafff869758cf3b81a7cd628bacf66e7325ab723598cd4164bd07829e0cf8cd1499c0fc111e2ed40805e15461f4c2ec0bc1bf8073b5b4d558565d0a17af5e33cf9fa07fd74944e14b", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r3, @in={{0x2, 0x4e23, @broadcast}}, 0x10000, 0x400, 0x1, 0x4, 0x10}, &(0x7f00000000c0)=0x98) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 483.363045] audit: type=1400 audit(1569024239.150:67): avc: denied { map } for pid=10978 comm="syz-executor.3" path="socket:[50465]" dev="sockfs" ino=50465 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 00:03:59 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 483.510994] device bridge_slave_1 left promiscuous mode [ 483.516489] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.574847] device bridge_slave_0 left promiscuous mode [ 483.582400] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.622201] device bridge_slave_1 left promiscuous mode [ 483.627664] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.671360] device bridge_slave_0 left promiscuous mode [ 483.676922] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.731594] device bridge_slave_1 left promiscuous mode [ 483.737079] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.790891] device bridge_slave_0 left promiscuous mode [ 483.796371] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.851103] device bridge_slave_1 left promiscuous mode [ 483.856575] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.891043] device bridge_slave_0 left promiscuous mode [ 483.896695] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.102502] device hsr_slave_1 left promiscuous mode [ 484.144158] device hsr_slave_0 left promiscuous mode [ 484.184342] team0 (unregistering): Port device team_slave_1 removed [ 484.194217] team0 (unregistering): Port device team_slave_0 removed [ 484.204615] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 484.244744] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 484.302668] bond0 (unregistering): Released all slaves [ 484.382801] device hsr_slave_1 left promiscuous mode [ 484.434092] device hsr_slave_0 left promiscuous mode [ 484.474361] team0 (unregistering): Port device team_slave_1 removed [ 484.484287] team0 (unregistering): Port device team_slave_0 removed [ 484.493743] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 484.543191] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 484.622557] bond0 (unregistering): Released all slaves [ 484.702743] device hsr_slave_1 left promiscuous mode [ 484.743361] device hsr_slave_0 left promiscuous mode [ 484.783949] team0 (unregistering): Port device team_slave_1 removed [ 484.795089] team0 (unregistering): Port device team_slave_0 removed [ 484.804869] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 484.854685] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 484.934273] bond0 (unregistering): Released all slaves [ 485.042747] device hsr_slave_1 left promiscuous mode [ 485.083632] device hsr_slave_0 left promiscuous mode [ 485.134429] team0 (unregistering): Port device team_slave_1 removed [ 485.144720] team0 (unregistering): Port device team_slave_0 removed [ 485.155141] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 485.184201] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 485.263817] bond0 (unregistering): Released all slaves [ 489.391377] IPVS: ftp: loaded support on port[0] = 21 [ 490.412991] IPVS: ftp: loaded support on port[0] = 21 [ 490.446652] chnl_net:caif_netlink_parms(): no params data found [ 490.487391] IPVS: ftp: loaded support on port[0] = 21 [ 490.510500] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.516974] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.526178] device bridge_slave_0 entered promiscuous mode [ 490.535010] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.541512] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.548371] device bridge_slave_1 entered promiscuous mode [ 490.582235] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 490.610724] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.657347] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 490.664516] team0: Port device team_slave_0 added [ 490.674642] chnl_net:caif_netlink_parms(): no params data found [ 490.683092] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 490.690799] team0: Port device team_slave_1 added [ 490.699586] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 490.707549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 490.833744] device hsr_slave_0 entered promiscuous mode [ 490.870469] device hsr_slave_1 entered promiscuous mode [ 490.913372] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 490.934632] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 490.947230] chnl_net:caif_netlink_parms(): no params data found [ 490.973261] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.979707] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.986918] device bridge_slave_0 entered promiscuous mode [ 490.993944] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.000730] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.007718] device bridge_slave_1 entered promiscuous mode [ 491.029251] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 491.045569] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 491.058597] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.065013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.071686] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.078042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.119447] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 491.128260] team0: Port device team_slave_0 added [ 491.134693] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 491.142039] team0: Port device team_slave_1 added [ 491.147053] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.153625] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.160832] device bridge_slave_0 entered promiscuous mode [ 491.167457] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.174286] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.181182] device bridge_slave_1 entered promiscuous mode [ 491.187549] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 491.195272] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 491.262507] device hsr_slave_0 entered promiscuous mode [ 491.300434] device hsr_slave_1 entered promiscuous mode [ 491.346195] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 491.359653] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 491.368023] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 491.385971] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 491.405574] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 491.413981] team0: Port device team_slave_0 added [ 491.419917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 491.427224] team0: Port device team_slave_1 added [ 491.432982] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 491.445222] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.451643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.458235] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.464615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.473951] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 491.481935] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.488558] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.498316] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.505893] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.583355] device hsr_slave_0 entered promiscuous mode [ 491.620344] device hsr_slave_1 entered promiscuous mode [ 491.680846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 491.693666] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 491.704603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.720254] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 491.729519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 491.737229] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 491.745308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 491.752574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 491.768937] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 491.775407] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.786763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 491.795704] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 491.803654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 491.811742] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.818100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.826671] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 491.841483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 491.849198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 491.857124] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.863518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.879050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 491.892618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.901043] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 491.907461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 491.921132] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 491.928022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 491.951640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.961689] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 491.971255] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 491.978648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 491.987007] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 491.994863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.002176] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.009723] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 492.019317] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 492.027055] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 492.035467] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.042951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 492.049749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 492.056741] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.064374] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.073119] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 492.079187] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.088765] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 492.099770] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 492.107374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.115342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.123076] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.129431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.136765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.144533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.153887] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 492.159963] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.169474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 492.179658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.187379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.195916] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 492.205413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 492.213010] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.221299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.228842] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.235233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.242410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 492.250319] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 492.257843] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.264230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.271866] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 492.277874] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.289752] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 492.297022] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 492.304460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 492.312317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 492.319887] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.326303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.337634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 492.345933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.356553] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 492.367482] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 492.375834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 492.384096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.394429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 492.408754] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 492.415205] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 492.424570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 492.436048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 492.443541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.451441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.458876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 492.466680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 492.474666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.481698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 492.495922] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 492.504218] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 492.513692] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 492.520565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.528283] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.535886] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 492.543812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 492.551966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.559488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.568486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.583890] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 492.591860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.601192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.614694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 492.624264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 492.636741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 492.645638] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 492.652606] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.661652] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 492.679575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 492.687658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 492.697479] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 492.714001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 492.738171] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 492.749355] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 492.764524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.785988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.796410] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.805673] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:08 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) getsockopt$inet6_int(r2, 0x29, 0xf802646398bdb52e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x8010, r0, 0x0) ioctl$VIDIOC_S_TUNER(r2, 0x4054561e, &(0x7f0000000000)={0xd10f, "15cb1d7ad536cef8d2f355fac1c9c2b0df3ca207070e26a267de73b498584a39", 0x3, 0x8, 0x4, 0x2, 0x10, 0x2, 0x7, 0xfffffffffffffff8}) ioctl$TIOCCONS(r2, 0x541d) [ 493.250559] device bridge_slave_1 left promiscuous mode [ 493.256048] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.311106] device bridge_slave_0 left promiscuous mode [ 493.316959] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.361857] device bridge_slave_1 left promiscuous mode [ 493.367378] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.420938] device bridge_slave_0 left promiscuous mode [ 493.426486] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.471949] device bridge_slave_1 left promiscuous mode [ 493.477500] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.530903] device bridge_slave_0 left promiscuous mode [ 493.536483] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.693883] device hsr_slave_1 left promiscuous mode [ 493.732774] device hsr_slave_0 left promiscuous mode [ 493.793074] team0 (unregistering): Port device team_slave_1 removed [ 493.803700] team0 (unregistering): Port device team_slave_0 removed [ 493.812879] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 493.853685] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 493.924830] bond0 (unregistering): Released all slaves [ 494.022813] device hsr_slave_1 left promiscuous mode [ 494.083731] device hsr_slave_0 left promiscuous mode [ 494.122919] team0 (unregistering): Port device team_slave_1 removed [ 494.133340] team0 (unregistering): Port device team_slave_0 removed [ 494.142971] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 494.175857] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 494.235518] bond0 (unregistering): Released all slaves [ 494.332482] device hsr_slave_1 left promiscuous mode [ 494.374392] device hsr_slave_0 left promiscuous mode [ 494.434238] team0 (unregistering): Port device team_slave_1 removed [ 494.444122] team0 (unregistering): Port device team_slave_0 removed [ 494.453709] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 494.485858] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 494.546989] bond0 (unregistering): Released all slaves 00:04:10 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:10 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000000)=""/213) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:04:10 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:10 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 494.600566] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.607260] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.616101] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.622847] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:10 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:10 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="314663c2a45ca92293110300000000000000f070") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x0, 0x8012, r1, 0x2) 00:04:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000000)={0x60002004}) 00:04:10 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:10 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x8000, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1, 0x30302) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000a65000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="d8b8ee0066b90108000066b80070000066ba000000000f30660f72f4ac0f01c967e74826260f01cf0f01ca0f73d47abaf80c66b8c3ac178a66efbafc0cec3e36360f78a20300", 0x46}], 0x1, 0x6cca43c86da1f941, &(0x7f0000000180)=[@cr0={0x0, 0x40020}, @dstype0={0x6, 0x9}], 0x2) r4 = dup2(r1, r1) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:04:10 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB=' \x00\b\x00', @ANYRES16=r3, @ANYBLOB="000426bd700000000000030000000c0004000000000071000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x0) write$P9_RCLUNK(r0, &(0x7f0000000180)={0x7, 0x79, 0x1}, 0x7) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x48bf34eb}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1000}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x10000}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xfffffffffffffea8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) [ 498.261482] IPVS: ftp: loaded support on port[0] = 21 [ 499.072325] IPVS: ftp: loaded support on port[0] = 21 [ 499.090857] chnl_net:caif_netlink_parms(): no params data found [ 499.147821] IPVS: ftp: loaded support on port[0] = 21 [ 499.158245] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.164822] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.171935] device bridge_slave_0 entered promiscuous mode [ 499.178702] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.185497] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.192697] device bridge_slave_1 entered promiscuous mode [ 499.225595] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 499.236594] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.268093] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 499.275208] team0: Port device team_slave_0 added [ 499.314543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 499.321672] team0: Port device team_slave_1 added [ 499.342397] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 499.350865] IPVS: ftp: loaded support on port[0] = 21 [ 499.354005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 499.381970] chnl_net:caif_netlink_parms(): no params data found [ 499.452363] device hsr_slave_0 entered promiscuous mode [ 499.470459] device hsr_slave_1 entered promiscuous mode [ 499.510779] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 499.520450] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 499.558567] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.565032] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.572115] device bridge_slave_0 entered promiscuous mode [ 499.580904] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.587240] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.594452] device bridge_slave_1 entered promiscuous mode [ 499.662935] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 499.672246] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.683230] IPVS: ftp: loaded support on port[0] = 21 [ 499.712811] chnl_net:caif_netlink_parms(): no params data found [ 499.761736] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.768125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.774773] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.781268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.792743] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 499.799764] team0: Port device team_slave_0 added [ 499.807689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 499.815617] team0: Port device team_slave_1 added [ 499.836881] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 499.853602] chnl_net:caif_netlink_parms(): no params data found [ 499.880177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 499.893905] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.900951] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.907912] device bridge_slave_0 entered promiscuous mode [ 499.920130] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.926587] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.933878] device bridge_slave_1 entered promiscuous mode [ 500.013961] device hsr_slave_0 entered promiscuous mode [ 500.050466] device hsr_slave_1 entered promiscuous mode [ 500.108021] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 500.116254] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.123394] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.132266] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 500.155643] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.177538] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 500.229643] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.236456] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.248237] device bridge_slave_0 entered promiscuous mode [ 500.255234] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 500.262675] team0: Port device team_slave_0 added [ 500.297704] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.305160] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.312614] device bridge_slave_1 entered promiscuous mode [ 500.319639] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 500.329741] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 500.341011] team0: Port device team_slave_1 added [ 500.346448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 500.358665] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 500.382173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 500.407579] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.417095] chnl_net:caif_netlink_parms(): no params data found [ 500.446270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.483425] device hsr_slave_0 entered promiscuous mode [ 500.520489] device hsr_slave_1 entered promiscuous mode [ 500.578734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 500.586516] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 500.596542] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 500.603943] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 500.611672] team0: Port device team_slave_0 added [ 500.617429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 500.624850] team0: Port device team_slave_1 added [ 500.649979] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 500.658577] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 500.668872] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 500.687206] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.694659] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.702350] device bridge_slave_0 entered promiscuous mode [ 500.709037] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.715730] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.723236] device bridge_slave_1 entered promiscuous mode [ 500.732459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.739864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.773919] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 500.782172] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.832379] device hsr_slave_0 entered promiscuous mode [ 500.880624] device hsr_slave_1 entered promiscuous mode [ 500.921268] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 500.928378] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 500.942530] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 500.952763] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 500.964264] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.986624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.001046] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 501.015387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.023411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.031408] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.037747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.053064] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 501.061077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 501.068146] team0: Port device team_slave_0 added [ 501.073856] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 501.080949] team0: Port device team_slave_1 added [ 501.093251] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 501.104411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 501.113101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 501.121956] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 501.128279] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 501.136539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.144615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.152492] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.158834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.165769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.172966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.196217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.203254] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 501.255048] device hsr_slave_0 entered promiscuous mode [ 501.310453] device hsr_slave_1 entered promiscuous mode [ 501.370649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 501.377574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 501.385002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.398294] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 501.404554] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.418857] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 501.426376] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 501.436206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 501.447791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 501.455418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 501.464221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 501.471944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 501.479443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 501.487169] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 501.495062] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 501.506728] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 501.519305] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 501.532064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.539895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.547719] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.554194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.567416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 501.575582] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 501.583549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.594102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 501.601754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 501.609117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.616133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 501.625094] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 501.638490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 501.648666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.656526] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.668223] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.674605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.681977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.691627] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 501.697699] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.706403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 501.721030] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 501.727892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 501.736696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 501.744541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 501.754411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 501.764532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.778534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 501.787076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 501.795195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 501.803385] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.809716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.816716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 501.824871] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 501.834765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 501.845830] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 501.852221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 501.859988] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 501.867358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 501.875321] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 501.882237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.889886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.897695] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.904079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.911292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 501.918862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 501.928374] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 501.936652] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 501.948203] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 501.961581] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 501.973325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 501.980321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 501.987947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 501.995225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.002500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.009853] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.017591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.025059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.035118] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 502.045433] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 502.051914] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.058808] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 502.066985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.077627] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 502.086461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.097370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.105129] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.114867] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 502.141990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.149160] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 502.159409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.167040] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.175399] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.183343] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.189669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.196878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.206576] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 502.214707] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 502.224190] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 502.237990] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 502.245662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.257680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.265321] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.272277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.279769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.287699] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.297469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 502.313269] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 502.326733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.334606] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 502.342076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.349904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 502.357240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 502.364462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.372095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.382024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 502.392175] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 502.398251] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.409222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.421033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.432024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 502.441299] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 502.453061] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 502.461791] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 502.471597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.479230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.487013] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 502.494939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 502.503071] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.509602] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.516802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 502.524710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 502.532650] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.538984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.545974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.553502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.563546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 502.578050] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 502.596011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.609255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.618108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 502.630773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.638566] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.647806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 502.665195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.675338] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 502.693157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 502.704422] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 502.711830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 502.719827] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 502.727941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 502.735867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 502.744615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 502.757424] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 502.765170] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.774630] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.807415] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 502.823684] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 502.831630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 502.838585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 502.846841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 502.854396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 502.863041] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 502.874425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.885901] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.894580] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:18 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x2000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) dup2(r1, r1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:04:18 executing program 4: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x11) wait4(0x0, 0x0, 0x0, 0x0) [ 502.952818] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 502.958889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 502.981370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 00:04:18 executing program 3: pipe(&(0x7f0000000000)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 503.018737] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 503.028538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.037624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.056220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 503.065432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.073624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.082385] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.125089] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 503.132766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.148936] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 503.164365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.274434] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.284953] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.385739] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.396871] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.570893] device bridge_slave_1 left promiscuous mode [ 503.576449] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.616121] device bridge_slave_0 left promiscuous mode [ 503.629301] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.672115] device bridge_slave_1 left promiscuous mode [ 503.677587] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.720920] device bridge_slave_0 left promiscuous mode [ 503.726439] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.781586] device bridge_slave_1 left promiscuous mode [ 503.787064] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.830977] device bridge_slave_0 left promiscuous mode [ 503.836465] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.993171] device hsr_slave_1 left promiscuous mode [ 504.044006] device hsr_slave_0 left promiscuous mode [ 504.085044] team0 (unregistering): Port device team_slave_1 removed [ 504.094732] team0 (unregistering): Port device team_slave_0 removed [ 504.107555] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 504.145581] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 504.205474] bond0 (unregistering): Released all slaves [ 504.281973] device hsr_slave_1 left promiscuous mode [ 504.323891] device hsr_slave_0 left promiscuous mode [ 504.373024] team0 (unregistering): Port device team_slave_1 removed [ 504.384834] team0 (unregistering): Port device team_slave_0 removed [ 504.394674] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 504.443402] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 504.498020] bond0 (unregistering): Released all slaves [ 504.574142] device hsr_slave_1 left promiscuous mode [ 504.642907] device hsr_slave_0 left promiscuous mode [ 504.694465] team0 (unregistering): Port device team_slave_1 removed [ 504.704115] team0 (unregistering): Port device team_slave_0 removed [ 504.714350] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 504.763321] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 504.834190] bond0 (unregistering): Released all slaves 00:04:20 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:20 executing program 4: 00:04:20 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:20 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:20 executing program 5: 00:04:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x16102, 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000040)=0x1) [ 504.901495] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.908038] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:20 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:20 executing program 3: arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x676, 0x2539858, 0x0, 0x10001, 0x7f, 0x140, 0x3, 0x1, 0xfffffffffffff407, 0x3, 0x8}, 0xb) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x1, 0x10, 0x970, 0x1}, &(0x7f0000000200)=0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x7}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x2, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r8}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r8}}, 0x18) r9 = dup2(r6, r6) ioctl(r9, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl(r13, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$netrom_NETROM_T2(r13, 0x103, 0x2, &(0x7f0000000080)=0x10001, &(0x7f00000000c0)=0x4) ioctl(r11, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x600, 0xdc, 0x6, {0xb, @pix={0x0, 0x7fff, 0x0, 0x3, 0x80000001, 0x371, 0xa, 0x120a000000000, 0x1, 0x2, 0x2, 0x3}}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r11, 0x54a1) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x8040ae9f, &(0x7f0000000040)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 00:04:20 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) socketpair(0x5, 0x800, 0x9, &(0x7f0000000000)) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x2a90) mmap(&(0x7f0000b99000/0x3000)=nil, 0x3000, 0x1000002, 0x852, r0, 0x10000000000000) 00:04:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$cgroup_ro(r5, &(0x7f0000000240)='memory.current\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}}, 0x0) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r9 = dup2(r3, r8) ioctl(r9, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup2(r10, r10) ioctl(r11, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0xb323040196006a4, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180)) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup2(r12, r12) ioctl(r13, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r14 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(r14, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2e, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r13, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r15}}, 0x18) setsockopt$inet_tcp_int(r14, 0x6, 0x24, &(0x7f0000000000)=0x6, 0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:04:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = dup2(0xffffffffffffffff, r5) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000000)=0x5) socket$inet(0x2, 0x5919e7640f781840, 0x2) 00:04:21 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r5, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f00000001c0)={{0x3, 0x6, 0x5, 0xfffffffffffffe00, '\x00', 0x6}, 0x4, 0x4, 0x6, r6, 0x6, 0x1, 'syz1\x00', &(0x7f0000000140)=['em1\x00', '/dev/usbmon#\x00', 'wlan1*^wlan1\\bdevnodev,!]/\x00', '.\x00', '/dev/usbmon#\x00', '/dev/usbmon#\x00'], 0x48, [], [0x2, 0x7fff, 0x10000, 0x3]}) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x5fcfd0ecbf1f9c84, 0x0) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)={0x12c, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdc22}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_MEDIA={0x60, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x25e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_NET={0x74, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8e}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 508.421385] IPVS: ftp: loaded support on port[0] = 21 [ 509.195454] IPVS: ftp: loaded support on port[0] = 21 [ 509.265239] chnl_net:caif_netlink_parms(): no params data found [ 509.324943] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.332489] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.339344] device bridge_slave_0 entered promiscuous mode [ 509.349725] IPVS: ftp: loaded support on port[0] = 21 [ 509.360729] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.367264] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.374386] device bridge_slave_1 entered promiscuous mode [ 509.397192] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 509.406247] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 509.427766] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 509.435748] team0: Port device team_slave_0 added [ 509.441689] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 509.448931] team0: Port device team_slave_1 added [ 509.454475] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 509.464379] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 509.543162] device hsr_slave_0 entered promiscuous mode [ 509.580366] device hsr_slave_1 entered promiscuous mode [ 509.634858] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 509.661689] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 509.701362] chnl_net:caif_netlink_parms(): no params data found [ 509.733639] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.740215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.746884] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.753263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.772462] IPVS: ftp: loaded support on port[0] = 21 [ 509.865760] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.872452] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.879461] device bridge_slave_0 entered promiscuous mode [ 509.886437] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.892902] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.899887] device bridge_slave_1 entered promiscuous mode [ 509.935910] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 509.944790] chnl_net:caif_netlink_parms(): no params data found [ 509.962805] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 510.010399] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 510.017474] team0: Port device team_slave_0 added [ 510.023936] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 510.031331] team0: Port device team_slave_1 added [ 510.036628] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 510.060154] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 510.081407] IPVS: ftp: loaded support on port[0] = 21 [ 510.092919] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.099329] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.106347] device bridge_slave_0 entered promiscuous mode [ 510.119991] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.126625] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.133893] device bridge_slave_1 entered promiscuous mode [ 510.212504] device hsr_slave_0 entered promiscuous mode [ 510.250370] device hsr_slave_1 entered promiscuous mode [ 510.292348] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 510.298454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.321062] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.328321] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.339113] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 510.347463] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 510.357327] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 510.386276] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 510.398907] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 510.453170] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 510.462706] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 510.469810] team0: Port device team_slave_0 added [ 510.486793] chnl_net:caif_netlink_parms(): no params data found [ 510.497277] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 510.505922] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 510.514377] team0: Port device team_slave_1 added [ 510.524595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 510.551435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.558341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.568368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 510.576975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 510.599264] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 510.605703] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.633159] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 510.692670] device hsr_slave_0 entered promiscuous mode [ 510.740446] device hsr_slave_1 entered promiscuous mode [ 510.788691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 510.796730] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 510.804173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.811964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.819552] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.825923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.835703] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 510.846753] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.853625] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.860814] device bridge_slave_0 entered promiscuous mode [ 510.876700] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 510.884260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.892072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.899611] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.906008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.956859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 510.969528] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.976946] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.989697] device bridge_slave_1 entered promiscuous mode [ 511.031072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.041056] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 511.050014] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 511.085625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.099787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.107918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.121349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.149539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 511.158450] chnl_net:caif_netlink_parms(): no params data found [ 511.171813] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 511.186282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.194419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.207462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.217369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 511.231560] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.247819] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.255415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.266111] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 511.281280] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 511.288066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.301200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.315736] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 511.323249] team0: Port device team_slave_0 added [ 511.329422] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 511.337073] team0: Port device team_slave_1 added [ 511.351542] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 511.370763] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 511.378939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 511.385942] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.398119] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 511.404863] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.418717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 511.435319] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 511.444588] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.451770] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.458681] device bridge_slave_0 entered promiscuous mode [ 511.466143] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.472907] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.479775] device bridge_slave_1 entered promiscuous mode [ 511.501780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.509554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.517647] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.524069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.531707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.547117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.612621] device hsr_slave_0 entered promiscuous mode [ 511.650538] device hsr_slave_1 entered promiscuous mode [ 511.712127] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 511.721896] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 511.729025] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 511.741759] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 511.750186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.757965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.765711] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.772098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.779211] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 511.788173] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 511.799461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.817012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.825788] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 511.833345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 511.842091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 511.850866] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 511.858532] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 511.865247] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.877865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.913707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 511.926266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.935180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.942936] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.949386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.957523] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 511.973743] team0: Port device team_slave_0 added [ 511.979807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 511.988949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 511.999546] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 512.016620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 00:04:27 executing program 4: [ 512.026667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.041824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.049658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.064581] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.071026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.078875] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 512.087080] team0: Port device team_slave_1 added [ 512.096897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 512.106879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 512.118074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 512.126518] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.134391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.142757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.153157] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 512.165424] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 512.173781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.180899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.188521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.199168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 512.217977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.226852] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 512.236725] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 512.294495] device hsr_slave_0 entered promiscuous mode [ 512.330513] device hsr_slave_1 entered promiscuous mode [ 512.400979] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 512.407971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.415694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.423302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.432168] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.439943] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.453197] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 512.484531] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 512.496672] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.509125] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.518586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 512.540648] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 512.546730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.554324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.562713] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.573391] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 512.594639] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 512.604169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 512.612849] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 512.622846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.633859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.641842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.649324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.659040] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 512.666198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.681816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.688947] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 512.698919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.724810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.734656] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 512.750969] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 512.758693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 512.767517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 512.786410] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 512.796302] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.827497] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 512.839258] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 512.849039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.856981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.866060] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.872488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.879435] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.887819] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.895644] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.902064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.909340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.934215] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 512.957424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.968536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 512.992428] binder: 11200:11202 unknown command 25358 [ 512.997787] binder: 11200:11202 ioctl c0306201 20008fd0 returned -22 [ 513.000447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.024209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.058674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 513.068447] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 513.076219] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.084329] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.118399] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.127075] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.150860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 513.158633] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 00:04:29 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x100000000, 0x4000) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x1, 0x3, 0x3}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) [ 513.166340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.188708] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 513.201821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 513.215702] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 513.226363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 513.236803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 513.243925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 513.252204] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 513.259728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.267641] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.277608] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 513.284036] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.301793] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 513.320805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.330639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.345274] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 513.354753] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 513.362292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.369291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 513.377600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 513.385332] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.391807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.398883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 513.417772] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 513.433511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 513.448693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 513.457091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 513.465269] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.471680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.494554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 513.513948] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 513.532558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 513.540498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 513.554870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.566795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 513.579085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 513.587176] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 513.595111] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 513.611717] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 513.621594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 513.628709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 513.636764] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 513.645287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.653098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.669160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 513.676039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.684389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.695365] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 513.702050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.722749] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 513.734087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.934927] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.943239] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:29 executing program 5: 00:04:29 executing program 4: 00:04:29 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:29 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:29 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000adf000/0x2000)=nil, 0x2000, 0x1000002, 0x8012, r0, 0x0) 00:04:29 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:29 executing program 4: 00:04:29 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x400000000000368, 0x1a002, &(0x7f0000000180)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) 00:04:29 executing program 4: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendfile(r0, r1, 0x0, 0x7fffffff) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r3, r0, 0x0, 0xffffffff) [ 514.168025] audit: type=1800 audit(1569024269.950:68): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16682 res=0 00:04:30 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffd000/0x2000)=nil) r4 = request_key(&(0x7f0000000080)='rxrpc\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000140)='/dev/usbmon#\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl(r5, 0xffffffffffff7fff, &(0x7f0000000280)="f01e1ebb71e42f96b7e7270d0b685874aa186b71c2593cea8620f76abd9c83741b013a05aa3cfc64bc42813a4c787681380ae77a434143984fcea6dcb69c7dd6") shmat(r3, &(0x7f0000ffc000/0x3000)=nil, 0x0) shmctl$SHM_STAT(r3, 0xd, &(0x7f0000000000)=""/94) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="6da2a32b42b66ea70b3f0ce18e6d15555d9c4065ac523847b00b6df8ae034732968a6bd3ebd6292399ad3a1deabe0e9650a544190a8812f09d35ea5f1ed20cef3cd4db414adecbbbb739fad151c0c67de8574d75cf873113677ec0f35ab5bd67fc4eb8e1ba05b6ebc3d6f0ae8fd368f8340e358e00e48901c94cb110228005ac", 0x80, r4) [ 514.225226] audit: type=1804 audit(1569024269.950:69): pid=11241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir034816735/syzkaller.QI15m9/4/file0" dev="sda1" ino=16682 res=1 00:04:30 executing program 5: socket$packet(0x11, 0x0, 0x300) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) pause() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = gettid() tkill(r0, 0x14) 00:04:30 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 514.343770] audit: type=1804 audit(1569024270.040:70): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir034816735/syzkaller.QI15m9/4/file0" dev="sda1" ino=16682 res=1 00:04:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dEv/usbmon\x00', 0x0, 0x807e6cb1edfb25b9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40042409, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xc) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f00000000c0)={0x94e, 0x8, 0x46c7, 0xf96, 0xc120, 0x7fffffff}) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r9, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x50, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000200)={@flat=@weak_handle={0x77682a85, 0xa, 0x2}, @fda={0x66646185, 0xa, 0x0, 0xc}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}}, @enter_looper], 0xc3, 0x0, &(0x7f0000000300)="2f31aa8ee4883bcb28cf195d451eff7b2db920209bea06494afa2f65b6cc863c66b058e762ccf0a049cc30ed9145cf720a635a6c67d93c756ed12f608ba3057d850acc5611aaa725030d90248ef1757f75cee0811d62bb2591e72e41ecb76c93ed096bec641046c5fc64b3fdcb927f9bdfab88928b89e577219d43e1ad4fe48e93ceee2ff878cabb806413693baaaaacc0ca50d02a7d62763f749b544ca312a344c7d52853c6e4da5a1ad591018dcd0be6147da550b10e5009982dfbd076ba2079942a"}) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 514.972082] audit: type=1804 audit(1569024270.760:71): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir034816735/syzkaller.QI15m9/4/file0" dev="sda1" ino=16682 res=1 [ 515.070163] audit: type=1804 audit(1569024270.810:72): pid=11263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir034816735/syzkaller.QI15m9/4/file0" dev="sda1" ino=16682 res=1 [ 515.290687] device bridge_slave_1 left promiscuous mode [ 515.296254] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.361093] device bridge_slave_0 left promiscuous mode [ 515.366630] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.411148] device bridge_slave_1 left promiscuous mode [ 515.416636] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.470754] device bridge_slave_0 left promiscuous mode [ 515.476220] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.531129] device bridge_slave_1 left promiscuous mode [ 515.536610] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.590887] device bridge_slave_0 left promiscuous mode [ 515.596444] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.651347] device bridge_slave_1 left promiscuous mode [ 515.656817] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.701241] device bridge_slave_0 left promiscuous mode [ 515.706773] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.761591] device bridge_slave_1 left promiscuous mode [ 515.767119] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.820873] device bridge_slave_0 left promiscuous mode [ 515.826364] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.054552] device hsr_slave_1 left promiscuous mode [ 516.094342] device hsr_slave_0 left promiscuous mode [ 516.134568] team0 (unregistering): Port device team_slave_1 removed [ 516.144231] team0 (unregistering): Port device team_slave_0 removed [ 516.153710] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 516.195460] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 516.266735] bond0 (unregistering): Released all slaves [ 516.340951] device hsr_slave_1 left promiscuous mode [ 516.393551] device hsr_slave_0 left promiscuous mode [ 516.434758] team0 (unregistering): Port device team_slave_1 removed [ 516.444782] team0 (unregistering): Port device team_slave_0 removed [ 516.454481] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 516.495772] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 516.585660] bond0 (unregistering): Released all slaves [ 516.673150] device hsr_slave_1 left promiscuous mode [ 516.723355] device hsr_slave_0 left promiscuous mode [ 516.773049] team0 (unregistering): Port device team_slave_1 removed [ 516.783506] team0 (unregistering): Port device team_slave_0 removed [ 516.794905] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 516.823748] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 516.915517] bond0 (unregistering): Released all slaves [ 517.001916] device hsr_slave_1 left promiscuous mode [ 517.055154] device hsr_slave_0 left promiscuous mode [ 517.094393] team0 (unregistering): Port device team_slave_1 removed [ 517.104214] team0 (unregistering): Port device team_slave_0 removed [ 517.117527] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 517.154584] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 517.237327] bond0 (unregistering): Released all slaves [ 517.302504] device hsr_slave_1 left promiscuous mode [ 517.343576] device hsr_slave_0 left promiscuous mode [ 517.394374] team0 (unregistering): Port device team_slave_1 removed [ 517.404300] team0 (unregistering): Port device team_slave_0 removed [ 517.415707] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 517.455493] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 517.525560] bond0 (unregistering): Released all slaves [ 522.171396] IPVS: ftp: loaded support on port[0] = 21 [ 523.131655] chnl_net:caif_netlink_parms(): no params data found [ 523.132495] IPVS: ftp: loaded support on port[0] = 21 [ 523.177865] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.184388] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.191290] device bridge_slave_0 entered promiscuous mode [ 523.197942] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.204461] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.212022] device bridge_slave_1 entered promiscuous mode [ 523.245043] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 523.261682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 523.273557] IPVS: ftp: loaded support on port[0] = 21 [ 523.291480] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 523.298600] team0: Port device team_slave_0 added [ 523.304367] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 523.311554] team0: Port device team_slave_1 added [ 523.317153] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 523.324546] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 523.392463] device hsr_slave_0 entered promiscuous mode [ 523.430360] device hsr_slave_1 entered promiscuous mode [ 523.482781] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 523.522792] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 523.546258] chnl_net:caif_netlink_parms(): no params data found [ 523.587442] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.593898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.600991] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.608032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.639495] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.646147] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.653990] device bridge_slave_0 entered promiscuous mode [ 523.660817] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.667203] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.674276] device bridge_slave_1 entered promiscuous mode [ 523.758809] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 523.765473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.773591] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 523.806493] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 523.819319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 523.847928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 523.855654] team0: Port device team_slave_0 added [ 523.861401] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 523.868644] team0: Port device team_slave_1 added [ 523.873748] chnl_net:caif_netlink_parms(): no params data found [ 523.886910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 523.897875] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 523.905183] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 523.912558] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.919213] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.934201] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 523.941430] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.986467] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.994191] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.002809] device bridge_slave_0 entered promiscuous mode [ 524.009303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.017730] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.024088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.074261] device hsr_slave_0 entered promiscuous mode [ 524.120469] device hsr_slave_1 entered promiscuous mode [ 524.160556] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.166957] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.178470] device bridge_slave_1 entered promiscuous mode [ 524.191140] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 524.198198] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.206200] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.212720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.221884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 524.229032] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 524.240944] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 524.262025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.272075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 524.286884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 524.294760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 524.306180] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 524.314882] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 524.321737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.331039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 524.338063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.345886] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.360580] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 524.376651] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 524.394084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.403195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.412937] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 524.427421] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 524.434713] team0: Port device team_slave_0 added [ 524.439953] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.447670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.457069] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 524.463488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.477105] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 524.484547] team0: Port device team_slave_1 added [ 524.489952] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 524.502083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 524.564576] device hsr_slave_0 entered promiscuous mode [ 524.620498] device hsr_slave_1 entered promiscuous mode [ 524.680868] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 524.688176] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 524.707605] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 524.719538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.736809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.745826] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 524.755144] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 524.769557] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 524.782202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 524.789366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.798508] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 524.805354] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.817289] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 524.829710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.839832] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.847572] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.853946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.862417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.871945] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 524.887996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 524.895849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.903757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.912120] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.918482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.918873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 524.939335] binder: 11287:11288 unknown command 25358 [ 524.949456] binder: 11287:11288 ioctl c0306201 20008fd0 returned -22 [ 524.958308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 524.967447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 524.991559] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 524.997747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.005489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 525.015753] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 525.023447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 525.031330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.038830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 525.046737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.054971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.063475] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.070148] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.080395] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready 00:04:40 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x7, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 525.089493] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 525.113535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.130591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.138166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.145951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.154728] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 525.168043] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 525.176430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 525.183530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 525.194398] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 525.200812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.210527] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 525.216653] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.223731] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 525.274113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 525.286821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 525.294938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 525.305697] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.312122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.325464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 525.335413] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 525.343060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 525.350844] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 525.358668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 525.366792] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.373181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.384247] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 525.395270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.402585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 525.417211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 525.424556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 525.435126] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 525.443333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 525.454234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.462962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 525.472673] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 525.483697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 525.491745] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 525.501127] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 525.510759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 525.517791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 525.526694] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 525.534699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 525.542246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 525.560727] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 525.566793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 525.593525] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 525.607281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.638887] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.650176] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:41 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:41 executing program 5: open(0x0, 0x20141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={@initdev, @multicast2}, &(0x7f00000008c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x6}, 0x3c) 00:04:41 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:41 executing program 4: seccomp(0x0, 0x0, 0x0) io_setup(0xc32f, &(0x7f0000000440)) 00:04:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'io'}]}, 0x4) [ 525.733732] audit: type=1326 audit(1569024281.520:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11308 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0x0 00:04:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0xfff, &(0x7f00000000c0)=0x1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="2508000000000000000003000000"], 0x14}}, 0x0) r3 = dup2(r1, r0) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 525.789240] audit: type=1400 audit(1569024281.550:74): avc: denied { sys_admin } for pid=11310 comm="syz-executor.5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 00:04:41 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:41 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:04:41 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 526.230466] device bridge_slave_1 left promiscuous mode [ 526.236112] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.316776] device bridge_slave_0 left promiscuous mode [ 526.324385] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.371989] device bridge_slave_1 left promiscuous mode [ 526.378700] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.430819] device bridge_slave_0 left promiscuous mode [ 526.437491] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.491564] device bridge_slave_1 left promiscuous mode [ 526.498286] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.536765] audit: type=1326 audit(1569024282.320:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=11308 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c84a code=0x0 [ 526.570793] device bridge_slave_0 left promiscuous mode [ 526.580516] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.734173] device hsr_slave_1 left promiscuous mode [ 526.772691] device hsr_slave_0 left promiscuous mode [ 526.803395] team0 (unregistering): Port device team_slave_1 removed [ 526.815203] team0 (unregistering): Port device team_slave_0 removed [ 526.824684] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 526.893705] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 526.973727] bond0 (unregistering): Released all slaves [ 527.072500] device hsr_slave_1 left promiscuous mode [ 527.114295] device hsr_slave_0 left promiscuous mode [ 527.164220] team0 (unregistering): Port device team_slave_1 removed [ 527.173858] team0 (unregistering): Port device team_slave_0 removed [ 527.184113] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 527.225439] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 527.302974] bond0 (unregistering): Released all slaves [ 527.392628] device hsr_slave_1 left promiscuous mode [ 527.433001] device hsr_slave_0 left promiscuous mode [ 527.493059] team0 (unregistering): Port device team_slave_1 removed [ 527.504213] team0 (unregistering): Port device team_slave_0 removed [ 527.514519] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 527.556661] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 527.624106] bond0 (unregistering): Released all slaves 00:04:43 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xc9, 0x4000) 00:04:43 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:43 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:43 executing program 5: open(0x0, 0x20141042, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2400000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') clone(0xc75e43cfae22dd4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000880)={@initdev, @multicast2}, &(0x7f00000008c0)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x7, 0x4, 0x0, 0x6}, 0x3c) [ 527.690941] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.697552] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:43 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000013c0)=""/4096, 0x400c}], 0x1}, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 527.768308] binder: 11341:11345 unknown command 25358 [ 527.784317] binder: 11341:11345 ioctl c0306201 20008fd0 returned -22 [ 527.842096] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.850516] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.881402] IPVS: ftp: loaded support on port[0] = 21 [ 531.809698] chnl_net:caif_netlink_parms(): no params data found [ 531.818192] IPVS: ftp: loaded support on port[0] = 21 [ 531.857398] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.863907] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.871206] device bridge_slave_0 entered promiscuous mode [ 531.886865] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.893534] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.900795] device bridge_slave_1 entered promiscuous mode [ 531.923350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 531.934526] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 531.964006] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 531.971503] team0: Port device team_slave_0 added [ 531.977138] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 531.984358] team0: Port device team_slave_1 added [ 531.989946] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 531.997446] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 532.073761] device hsr_slave_0 entered promiscuous mode [ 532.110417] device hsr_slave_1 entered promiscuous mode [ 532.156712] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 532.163970] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 532.237765] chnl_net:caif_netlink_parms(): no params data found [ 532.259968] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.266388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.272987] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.279426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.319604] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.327163] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.334223] device bridge_slave_0 entered promiscuous mode [ 532.354344] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.361638] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.368488] device bridge_slave_1 entered promiscuous mode [ 532.394887] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 532.404239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 532.426785] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 532.433397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.443489] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 532.451031] team0: Port device team_slave_0 added [ 532.456743] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 532.464186] team0: Port device team_slave_1 added [ 532.469534] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 532.477599] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 532.488092] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 532.542566] device hsr_slave_0 entered promiscuous mode [ 532.600377] device hsr_slave_1 entered promiscuous mode [ 532.641960] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 532.649169] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 532.659356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.667356] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.674148] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.685419] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 532.692969] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.713744] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.721693] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.728027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.735105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.743015] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.749339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.768920] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.778855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.789685] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 532.796974] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 532.803713] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 532.815230] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.822853] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.830443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.837843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.845970] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.852911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.869117] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 532.882868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.912085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.924876] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 532.934260] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 532.940891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.947737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.958240] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 532.964653] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.976801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 532.984281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.993103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 533.000704] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.007030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.017163] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 533.030845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 533.037972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 533.049743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 533.053946] binder: 11382:11383 unknown command 25358 [ 533.057892] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.062873] binder: 11382:11383 ioctl c0306201 20008fd0 returned -22 [ 533.068643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.088857] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 533.096424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.106802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 533.114872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.125188] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 533.136402] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.144220] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:49 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:49 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:04:49 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:49 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000280)) r3 = dup2(r1, r1) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r4, r4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x5, 0x0, "2a0fb40939a9347d0662755874e7adb5414749023a038e8cfc06da4c27a5e6ce3d8169bbb8883157d1ff28960f017d0a9b9c4b4bcda9b30c63f93a0a0e492e8384f0bb4501cc70243334025b94b2b9f8"}, 0xd8) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x3000002, 0x8012, r0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x276, 0x0, 0x0, 0xfffffe3d) ioctl$KVM_IRQ_LINE(r6, 0x4008ae61, &(0x7f0000000400)={0x36, 0xfffffffffffffffc}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f00000000c0)={'ifb0\x00', {0x2, 0x4e20, @local}}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc00) setsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x2b}, @in6=@mcast1, 0x4e24, 0x7, 0x4e20, 0x2, 0xc42a2d2472ecdd99, 0x0, 0xa0}, {0x8, 0xfffffffffffffff7, 0xe9, 0xfffffffffffffff5, 0x4, 0x6e4, 0xffff, 0x8}, {0x3ff, 0x83a, 0x95, 0xffffffff}, 0x1000, 0x6e6bb8, 0x2, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d5, 0x6c}, 0x4, @in6=@loopback, 0x34ff, 0x3, 0x0, 0xffffffff, 0x0, 0x100000001, 0x2}}, 0xe8) 00:04:49 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 533.166391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.177873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.189476] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 533.199416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 533.228266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.238465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.254703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.267600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.283073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.323417] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.334607] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.412599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 533.419545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 00:04:49 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 533.453930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.483176] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 533.489276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.578372] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 533.628393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.172287] device bridge_slave_1 left promiscuous mode [ 534.177810] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.230785] device bridge_slave_0 left promiscuous mode [ 534.236523] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.281912] device bridge_slave_1 left promiscuous mode [ 534.287551] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.340635] device bridge_slave_0 left promiscuous mode [ 534.346438] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.391649] device bridge_slave_1 left promiscuous mode [ 534.397174] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.450917] device bridge_slave_0 left promiscuous mode [ 534.456646] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.617030] device hsr_slave_1 left promiscuous mode [ 534.663195] device hsr_slave_0 left promiscuous mode [ 534.703224] team0 (unregistering): Port device team_slave_1 removed [ 534.714988] team0 (unregistering): Port device team_slave_0 removed [ 534.725287] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 534.767432] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 534.832501] bond0 (unregistering): Released all slaves [ 534.912634] device hsr_slave_1 left promiscuous mode [ 534.953895] device hsr_slave_0 left promiscuous mode [ 534.993062] team0 (unregistering): Port device team_slave_1 removed [ 535.005134] team0 (unregistering): Port device team_slave_0 removed [ 535.015195] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 535.046993] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 535.115356] bond0 (unregistering): Released all slaves [ 535.202196] device hsr_slave_1 left promiscuous mode [ 535.274043] device hsr_slave_0 left promiscuous mode [ 535.325548] team0 (unregistering): Port device team_slave_1 removed [ 535.336419] team0 (unregistering): Port device team_slave_0 removed [ 535.346854] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 535.404738] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 535.465205] bond0 (unregistering): Released all slaves 00:04:51 executing program 2: mkdir(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x8000, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000000c0)=0x6d, 0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:04:51 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:51 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:51 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 535.514557] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.521708] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x3000009, 0x40010, r0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0xd66af26d2ef84cb3) 00:04:51 executing program 2: mkdir(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:51 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_XCRS(r5, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000030000000400000000000000fcffffffffffffff030000000000000000020000000000000700000000000000040000000000000007000000000000000400000000000000010b000000000000020000000000000005000000000000000180000000000000"]) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 539.000949] IPVS: ftp: loaded support on port[0] = 21 [ 539.844362] IPVS: ftp: loaded support on port[0] = 21 [ 539.921763] chnl_net:caif_netlink_parms(): no params data found [ 539.955159] IPVS: ftp: loaded support on port[0] = 21 [ 539.988287] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.994923] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.002463] device bridge_slave_0 entered promiscuous mode [ 540.011834] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.018425] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.026370] device bridge_slave_1 entered promiscuous mode [ 540.098485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 540.113023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 540.147949] chnl_net:caif_netlink_parms(): no params data found [ 540.160797] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 540.168243] team0: Port device team_slave_0 added [ 540.186172] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 540.194056] team0: Port device team_slave_1 added [ 540.199792] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 540.216119] IPVS: ftp: loaded support on port[0] = 21 [ 540.226216] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 540.303024] device hsr_slave_0 entered promiscuous mode [ 540.340407] device hsr_slave_1 entered promiscuous mode [ 540.397073] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 540.446775] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 540.465628] chnl_net:caif_netlink_parms(): no params data found [ 540.475281] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.482218] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.489384] device bridge_slave_0 entered promiscuous mode [ 540.499265] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.506139] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.513661] device bridge_slave_1 entered promiscuous mode [ 540.539093] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 540.566710] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 540.595539] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 540.603525] team0: Port device team_slave_0 added [ 540.620503] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.627856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.634604] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.641130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.651104] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 540.658700] team0: Port device team_slave_1 added [ 540.678266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 540.688467] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 540.714666] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.721926] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.738074] device bridge_slave_0 entered promiscuous mode [ 540.793749] device hsr_slave_0 entered promiscuous mode [ 540.832690] device hsr_slave_1 entered promiscuous mode [ 540.878722] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.893672] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.902956] device bridge_slave_1 entered promiscuous mode [ 540.917025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 540.975726] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 540.989112] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.996733] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.010220] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 541.029218] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 541.041399] chnl_net:caif_netlink_parms(): no params data found [ 541.068357] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 541.086222] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 541.095520] team0: Port device team_slave_0 added [ 541.102351] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 541.109877] team0: Port device team_slave_1 added [ 541.115922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 541.138262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 541.192680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.205233] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 541.212223] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.218908] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.227058] device bridge_slave_0 entered promiscuous mode [ 541.272598] device hsr_slave_0 entered promiscuous mode [ 541.310466] device hsr_slave_1 entered promiscuous mode [ 541.369138] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 541.376299] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.383498] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.394634] device bridge_slave_1 entered promiscuous mode [ 541.402216] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.409531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.417166] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 541.427339] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 541.433850] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.447937] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 541.458554] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 541.477172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.485350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.493886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.501965] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.508771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.519347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 541.532737] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 541.545175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 541.554340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 541.564049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 541.577815] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 541.586305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.594733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.603489] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.609848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.617237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.625619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 541.633133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 541.642553] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 541.663336] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 541.672453] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 541.678914] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.686066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.696293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 541.704243] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 541.712083] team0: Port device team_slave_0 added [ 541.719984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 541.728006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 541.736494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 541.744445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 541.752394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 541.760450] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.767057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.774701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 541.781876] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 541.793236] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 541.800759] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 541.807872] team0: Port device team_slave_1 added [ 541.813749] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 541.826170] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 541.835162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 541.843722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 541.852066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 541.859866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 541.867828] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.874316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.882264] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 541.892060] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 541.901507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 541.915570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 541.925949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 541.934237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 541.942554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.004143] device hsr_slave_0 entered promiscuous mode [ 542.040477] device hsr_slave_1 entered promiscuous mode [ 542.082338] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 542.088437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.105025] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 542.112668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.121290] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 542.129188] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 542.143151] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 542.154802] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 542.161988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.174097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 542.186251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.197702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.206958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.223502] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 542.241862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.248921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.257330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.267226] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 542.287606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.295752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.305445] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 542.318538] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 542.327814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.336804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.347091] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 542.354080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.363539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.383175] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 542.396077] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 542.425652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.441228] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 542.454951] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 542.462432] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.464484] binder: 11445:11446 unknown command 25358 [ 542.476741] binder: 11445:11446 ioctl c0306201 20008fd0 returned -22 [ 542.489597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.499062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.508790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 542.518237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 542.528002] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 542.536096] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.542818] bridge0: port 1(bridge_slave_0) entered forwarding state [ 542.565724] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 542.578554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.589694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 542.598293] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 542.606732] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.613285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.624944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.637009] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.645257] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:58 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:04:58 executing program 2: mkdir(0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 542.673638] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 542.692040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 00:04:58 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008812, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x400000) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 542.718226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 542.734253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 542.756292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 542.773106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 542.817459] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 542.831850] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 542.838698] 8021q: adding VLAN 0 to HW filter on device team0 00:04:58 executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x6, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x0, 0x8012, r0, 0x0) [ 542.869251] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.878570] bridge0: port 1(bridge_slave_0) entered disabled state 00:04:58 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 542.943079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 542.960845] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 00:04:58 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 542.994626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 543.026086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.042043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.070103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.077883] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.108433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready 00:04:58 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) r4 = dup2(r1, r1) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) [ 543.119258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 543.168291] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.176226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 543.197508] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 543.218458] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.225295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.250419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.268349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.285347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 543.297031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 543.307708] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 543.320628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.348377] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 543.359275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 543.368984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.390892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.413357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 543.436389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 543.458071] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.464693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.504427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 543.516622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 543.530794] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 543.543946] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 543.579623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 543.613917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.674693] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 543.698118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 543.707285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 543.727121] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 543.743625] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 543.755549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 543.774087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 543.811279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 543.825756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 543.834195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 543.848423] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 543.864748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 543.873325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 543.887235] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 543.894256] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 543.907905] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 543.921945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.203026] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.209744] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.364383] binder: 11487:11488 unknown command 25358 [ 544.373654] binder: 11487:11488 ioctl c0306201 20008fd0 returned -22 00:05:00 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:00 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:00 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x55d340, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:00 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 544.436468] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.445587] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:00 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2000, 0x82100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:00 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 544.634058] device bridge_slave_1 left promiscuous mode [ 544.644465] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.706445] device bridge_slave_0 left promiscuous mode [ 544.730316] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.777164] device bridge_slave_1 left promiscuous mode [ 544.796082] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.856908] device bridge_slave_0 left promiscuous mode [ 544.876133] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.937118] device bridge_slave_1 left promiscuous mode [ 544.957724] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.016567] device bridge_slave_0 left promiscuous mode [ 545.030299] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.071532] device bridge_slave_1 left promiscuous mode [ 545.077050] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.136968] device bridge_slave_0 left promiscuous mode [ 545.142907] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.325499] device hsr_slave_1 left promiscuous mode [ 545.364312] device hsr_slave_0 left promiscuous mode [ 545.414293] team0 (unregistering): Port device team_slave_1 removed [ 545.424205] team0 (unregistering): Port device team_slave_0 removed [ 545.433914] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 545.483273] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 545.553687] bond0 (unregistering): Released all slaves [ 545.652650] device hsr_slave_1 left promiscuous mode [ 545.692690] device hsr_slave_0 left promiscuous mode [ 545.732969] team0 (unregistering): Port device team_slave_1 removed [ 545.744868] team0 (unregistering): Port device team_slave_0 removed [ 545.754254] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 545.783699] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 545.845052] bond0 (unregistering): Released all slaves [ 545.940135] device hsr_slave_1 left promiscuous mode [ 545.993901] device hsr_slave_0 left promiscuous mode [ 546.033045] team0 (unregistering): Port device team_slave_1 removed [ 546.043470] team0 (unregistering): Port device team_slave_0 removed [ 546.052657] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 546.103356] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 546.184069] bond0 (unregistering): Released all slaves [ 546.272523] device hsr_slave_1 left promiscuous mode [ 546.313903] device hsr_slave_0 left promiscuous mode [ 546.354283] team0 (unregistering): Port device team_slave_1 removed [ 546.364076] team0 (unregistering): Port device team_slave_0 removed [ 546.374189] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 546.415290] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 546.503331] bond0 (unregistering): Released all slaves [ 550.501531] IPVS: ftp: loaded support on port[0] = 21 [ 551.362487] IPVS: ftp: loaded support on port[0] = 21 [ 551.373545] chnl_net:caif_netlink_parms(): no params data found [ 551.433457] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.439923] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.452584] device bridge_slave_0 entered promiscuous mode [ 551.461618] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.467997] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.475291] device bridge_slave_1 entered promiscuous mode [ 551.483104] IPVS: ftp: loaded support on port[0] = 21 [ 551.501946] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 551.517015] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 551.539382] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 551.546649] team0: Port device team_slave_0 added [ 551.552302] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 551.559384] team0: Port device team_slave_1 added [ 551.574013] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 551.581506] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 551.682459] device hsr_slave_0 entered promiscuous mode [ 551.720355] device hsr_slave_1 entered promiscuous mode [ 551.773723] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 551.795797] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 551.815758] chnl_net:caif_netlink_parms(): no params data found [ 551.831562] IPVS: ftp: loaded support on port[0] = 21 [ 551.848652] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.855073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.861768] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.868162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.959828] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.966821] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.977001] device bridge_slave_0 entered promiscuous mode [ 551.984513] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.991127] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.998066] device bridge_slave_1 entered promiscuous mode [ 552.047141] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 552.055921] chnl_net:caif_netlink_parms(): no params data found [ 552.071366] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 552.127262] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 552.134697] team0: Port device team_slave_0 added [ 552.145879] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 552.153555] team0: Port device team_slave_1 added [ 552.163699] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 552.169777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 552.176285] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.182801] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.189665] device bridge_slave_0 entered promiscuous mode [ 552.196675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 552.205896] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 552.215398] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 552.222304] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.228702] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.239647] device bridge_slave_1 entered promiscuous mode [ 552.284229] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 552.292631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 552.304799] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.311756] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.364366] device hsr_slave_0 entered promiscuous mode [ 552.400517] device hsr_slave_1 entered promiscuous mode [ 552.445289] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 552.453277] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 552.468341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 552.476107] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 552.483086] 8021q: adding VLAN 0 to HW filter on device team0 [ 552.497311] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 552.529386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 552.540168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 552.553657] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 552.561210] team0: Port device team_slave_0 added [ 552.566513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 552.574313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 552.582340] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.588791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.596065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 552.604089] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 552.611983] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.618355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.647706] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 552.664543] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 552.672250] team0: Port device team_slave_1 added [ 552.677989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 552.687190] chnl_net:caif_netlink_parms(): no params data found [ 552.705660] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 552.713772] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 552.721874] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 552.743759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 552.765265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 552.814854] device hsr_slave_0 entered promiscuous mode [ 552.870516] device hsr_slave_1 entered promiscuous mode [ 552.913207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 552.934736] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 552.946310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 552.955207] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 552.964801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 552.972455] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.978789] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.988963] device bridge_slave_0 entered promiscuous mode [ 552.997055] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.003597] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.010793] device bridge_slave_1 entered promiscuous mode [ 553.018049] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 553.025563] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.032591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.040631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 553.068685] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 553.077991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 553.088033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 553.099346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 553.108203] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 553.128811] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 553.136449] team0: Port device team_slave_0 added [ 553.147998] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 553.155474] team0: Port device team_slave_1 added [ 553.160901] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 553.168239] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 553.178277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 553.244294] device hsr_slave_0 entered promiscuous mode [ 553.280483] device hsr_slave_1 entered promiscuous mode [ 553.341572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 553.349120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 553.362204] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 553.369053] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 553.375506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 553.383026] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 553.402671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.408973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 553.424011] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 553.437018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 553.452342] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 553.464242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.471288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.481106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.488841] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 553.497983] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 553.504843] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.514691] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 553.524409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.536501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.544761] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.551157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.561653] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 553.586801] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 553.594475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.602574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.611278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.619203] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.625609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.633911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.647106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.656864] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 553.669478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 553.677812] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 553.684923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 553.696842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 553.704045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 553.714763] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 553.721223] 8021q: adding VLAN 0 to HW filter on device team0 [ 553.729605] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 553.737677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 553.745571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 553.753562] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.759933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 553.788784] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 553.798035] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 553.805731] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 553.813493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 553.821480] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 553.829097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 553.837189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 553.844992] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.851370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 553.858255] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 553.869480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 553.884212] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.892329] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:09 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:09 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:09 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 553.925916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 553.939720] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 553.953189] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 553.960442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 553.992944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.016468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.041640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 554.063985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.072603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.097601] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 554.128374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 554.144077] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.164726] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 554.184304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.195278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.209771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.237001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.256686] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.282372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.317345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.338242] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 554.346637] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 554.371160] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 554.384251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.395656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.423279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 554.445099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.461402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.471618] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 554.479805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 554.493877] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 554.499982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.510295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.517966] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 554.531533] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 554.537634] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.544231] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.551957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.559268] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 554.566840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 554.579610] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 554.588733] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 554.608968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 554.618891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 554.626847] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.633236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.640679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 554.658893] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 554.669633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.678954] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 554.687764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 554.715692] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.722132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.733037] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 554.741158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 554.749401] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.755970] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.774923] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 554.787749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 554.799317] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 554.807268] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 554.815656] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 554.823566] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 554.841965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 554.851413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 554.858168] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 554.866339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 554.873995] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 554.882489] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 554.904645] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 554.911669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 554.919248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 554.952647] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 554.958721] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 554.978030] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 555.009084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.038221] binder: 11543:11546 unknown command 14 [ 555.052784] binder: 11543:11546 ioctl c0306201 20008fd0 returned -22 [ 555.105075] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.113213] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:11 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5, 0x4, [0x4, 0x3eb, 0x7f, 0x3]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080)={r3, 0x4f, "cb2108dc97bc0f2b272ffe470f91b920c244727d819ad7e2fdc694a9cbedcb7c43d8323d3b64d65798f879932f92d165834a2540d0e0d7a1e0171862840bf07cfcdc0d9a10e5037dd705f557097bcd"}, &(0x7f0000000140)=0x57) 00:05:11 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 555.409007] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.417027] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:11 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:11 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) r5 = gettid() ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000000)=r5) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r5, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000080)=0x0) sched_setaffinity(r6, 0x8, &(0x7f00000000c0)=0x4) ioctl$TCSBRK(r3, 0x5409, 0x9) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x5, 0xa000) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000003c0)={0x2, 0x7, 0x1, 0x7fffffff}) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_GET_FPU(r12, 0x81a0ae8c, &(0x7f0000000200)) 00:05:11 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:11 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:11 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=""/42, &(0x7f0000000340)=[{0x1f, 0xfd, 0x7, &(0x7f0000000140)=""/253}, {0xfffffffffffff800, 0x0, 0x4, &(0x7f0000000080)}, {0x4, 0x60, 0x1, &(0x7f00000002c0)=""/96}]}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000000)={0x3, @null, r5}) r6 = dup2(r1, r1) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 555.850490] device bridge_slave_1 left promiscuous mode [ 555.856040] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.910911] device bridge_slave_0 left promiscuous mode [ 555.916599] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.987072] device bridge_slave_1 left promiscuous mode [ 556.004593] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.070832] device bridge_slave_0 left promiscuous mode [ 556.076350] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.131952] device bridge_slave_1 left promiscuous mode [ 556.146000] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.211273] device bridge_slave_0 left promiscuous mode [ 556.216876] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.271818] device bridge_slave_1 left promiscuous mode [ 556.285723] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.350868] device bridge_slave_0 left promiscuous mode [ 556.356381] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.544925] device hsr_slave_1 left promiscuous mode [ 556.592665] device hsr_slave_0 left promiscuous mode [ 556.634883] team0 (unregistering): Port device team_slave_1 removed [ 556.645236] team0 (unregistering): Port device team_slave_0 removed [ 556.655631] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 556.723454] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 556.802761] bond0 (unregistering): Released all slaves [ 556.911845] device hsr_slave_1 left promiscuous mode [ 556.952737] device hsr_slave_0 left promiscuous mode [ 556.992750] team0 (unregistering): Port device team_slave_1 removed [ 557.002876] team0 (unregistering): Port device team_slave_0 removed [ 557.012391] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 557.064390] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 557.126995] bond0 (unregistering): Released all slaves [ 557.202845] device hsr_slave_1 left promiscuous mode [ 557.244225] device hsr_slave_0 left promiscuous mode [ 557.312848] team0 (unregistering): Port device team_slave_1 removed [ 557.323638] team0 (unregistering): Port device team_slave_0 removed [ 557.336472] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 557.394084] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 557.492720] bond0 (unregistering): Released all slaves [ 557.602602] device hsr_slave_1 left promiscuous mode [ 557.653629] device hsr_slave_0 left promiscuous mode [ 557.702594] team0 (unregistering): Port device team_slave_1 removed [ 557.712508] team0 (unregistering): Port device team_slave_0 removed [ 557.721883] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 557.743715] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 557.828420] bond0 (unregistering): Released all slaves 00:05:15 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0xc0, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x0, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x1fb) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001380)=r4, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r4, 0x4) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xd15fc0301ce7e1fa, &(0x7f00000000c0)={&(0x7f0000000480)={0xa0, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffeffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x81) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r8, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfec7bf070") setsockopt$IP_VS_SO_SET_STOPDAEMON(r8, 0x0, 0x48c, &(0x7f00000002c0)={0x5, 'netdevsim0\x00', 0x1}, 0x18) fcntl$setown(r5, 0x8, r7) [ 562.060851] IPVS: ftp: loaded support on port[0] = 21 [ 562.914241] IPVS: ftp: loaded support on port[0] = 21 [ 562.986614] chnl_net:caif_netlink_parms(): no params data found [ 563.032577] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.038979] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.047027] device bridge_slave_0 entered promiscuous mode [ 563.055228] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.061830] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.069072] device bridge_slave_1 entered promiscuous mode [ 563.069838] IPVS: ftp: loaded support on port[0] = 21 [ 563.103485] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 563.136737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 563.191181] chnl_net:caif_netlink_parms(): no params data found [ 563.205180] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 563.212317] team0: Port device team_slave_0 added [ 563.229294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 563.236769] team0: Port device team_slave_1 added [ 563.259281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 563.272252] IPVS: ftp: loaded support on port[0] = 21 [ 563.279819] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 563.292117] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.298506] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.305691] device bridge_slave_0 entered promiscuous mode [ 563.312791] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.319155] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.326403] device bridge_slave_1 entered promiscuous mode [ 563.432407] device hsr_slave_0 entered promiscuous mode [ 563.510391] device hsr_slave_1 entered promiscuous mode [ 563.573131] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 563.598659] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 563.606735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 563.638427] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 563.676990] chnl_net:caif_netlink_parms(): no params data found [ 563.706510] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 563.713638] team0: Port device team_slave_0 added [ 563.719061] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.725576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.732270] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.733517] IPVS: ftp: loaded support on port[0] = 21 [ 563.738638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.762897] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 563.769954] team0: Port device team_slave_1 added [ 563.776859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 563.784372] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 563.842913] device hsr_slave_0 entered promiscuous mode [ 563.881221] device hsr_slave_1 entered promiscuous mode [ 563.933202] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 563.980829] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 564.041163] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.047867] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.056274] chnl_net:caif_netlink_parms(): no params data found [ 564.066170] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.072596] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.079456] device bridge_slave_0 entered promiscuous mode [ 564.089553] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.096020] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.103311] device bridge_slave_1 entered promiscuous mode [ 564.155885] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 564.166500] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 564.179492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.191319] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 564.228046] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.234874] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.242133] device bridge_slave_0 entered promiscuous mode [ 564.248806] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.255340] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.262596] device bridge_slave_1 entered promiscuous mode [ 564.289895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 564.298933] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 564.312678] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 564.333649] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 564.341713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.348574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.356333] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 564.363877] team0: Port device team_slave_0 added [ 564.402438] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 564.408551] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.416192] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 564.424977] team0: Port device team_slave_1 added [ 564.439877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.447771] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 564.455390] team0: Port device team_slave_0 added [ 564.463186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 564.504217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 564.513914] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 564.520989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 564.528742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 564.536590] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.542983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.550724] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 564.557757] team0: Port device team_slave_1 added [ 564.563808] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 564.590959] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 564.602206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 564.610087] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 564.629768] chnl_net:caif_netlink_parms(): no params data found [ 564.639466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 564.647401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 564.654359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 564.661348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 564.668991] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 564.676653] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.683035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.703528] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 564.709634] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.742623] device hsr_slave_0 entered promiscuous mode [ 564.790377] device hsr_slave_1 entered promiscuous mode [ 564.846335] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 564.904207] device hsr_slave_0 entered promiscuous mode [ 564.940477] device hsr_slave_1 entered promiscuous mode [ 564.998759] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 565.010252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 565.018161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.027433] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 565.035223] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 565.042453] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 565.065486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 565.073571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 565.081548] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.087874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.098586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 565.110882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 565.140768] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 565.152028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 565.159114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 565.167014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 565.174925] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.181327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.188356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.199354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 565.208530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 565.216469] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.223340] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.231493] device bridge_slave_0 entered promiscuous mode [ 565.238586] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.245202] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.252434] device bridge_slave_1 entered promiscuous mode [ 565.269916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 565.278924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.287083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.295195] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.304454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 565.324296] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 565.333300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 565.346763] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 565.354983] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 565.366895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 565.379744] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 565.386687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 565.395098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 565.402743] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.410444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.418003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 565.427204] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 565.460791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 565.467599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 565.475366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 565.483087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.491323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.499311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 565.506904] team0: Port device team_slave_0 added [ 565.512795] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 565.519901] team0: Port device team_slave_1 added [ 565.531172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 565.539560] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 565.550520] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 565.556588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.567714] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 565.575510] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 565.593109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.601590] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.613372] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 565.636103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 565.644449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 565.656205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 565.714174] device hsr_slave_0 entered promiscuous mode [ 565.770696] device hsr_slave_1 entered promiscuous mode [ 565.811783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 565.822389] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 565.833890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 565.842183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 565.856614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.866002] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 565.879635] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 565.885908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 565.903379] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 565.913101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.928070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.938514] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 565.952852] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 565.959905] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 565.967690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 565.978329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 565.986741] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 565.999438] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 566.006567] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.025952] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 566.035827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.043208] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.052871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.061990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 566.086749] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 566.095246] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.102903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.116182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.124078] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.130481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.142255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 566.165845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.184931] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 566.192499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 566.200644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.208375] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.214797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.225741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 566.258186] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 566.286647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.298900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.314209] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.320758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.328210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 566.338931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 566.347445] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 566.354906] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.364183] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.396952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 566.411028] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.419325] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.440891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 566.448093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 566.456344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready 00:05:22 executing program 5: seccomp(0x0, 0x0, &(0x7f00000000c0)) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000100)) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 00:05:22 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r1, 0x810080804535, 0x0) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000000)=""/161) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$PPPIOCDISCONN(r5, 0x7439) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FIONREAD(r7, 0x541b, &(0x7f00000000c0)) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 566.464057] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.470447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.477654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 566.488953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 566.498425] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 00:05:22 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 566.525466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 566.539130] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 566.547364] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 566.556278] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 566.566286] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 566.572488] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.578853] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 566.586647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.593684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.602454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 566.610710] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 566.637931] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 566.650557] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 566.659799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 566.667857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 566.676666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 00:05:22 executing program 5: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x800006, 0x0, 0x0, 0xffffff7f7fffffff}]}) r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) sendfile(r0, r0, 0x0, 0x0) [ 566.684524] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 566.693050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 566.706162] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 566.726514] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 566.740600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.748421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.776643] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.783051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.790458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.797917] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.806347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 566.815718] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 566.826464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 566.838531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 566.847021] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.854620] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.861012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.868440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 566.876284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 566.887241] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 566.898514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 566.906387] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 566.915842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 566.925111] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 566.932811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 566.941343] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 566.949723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 566.961678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 566.969276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 566.998021] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 567.009663] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.020368] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 567.026444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.036944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.046043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.055050] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 567.087952] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 567.101014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 567.110859] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 567.122095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 567.131186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 567.139714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 567.149771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.163052] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 567.174835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 567.183255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.193661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.203036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.212063] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 567.227015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 567.234738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.254572] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 567.266225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.274877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.293155] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 567.299242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.327921] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 567.338182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.637644] binder: 11637:11639 unknown command 14 [ 567.643868] binder: 11637:11639 ioctl c0306201 20008fd0 returned -22 [ 567.687832] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.699907] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.804561] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.813055] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.835266] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.847028] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:23 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:23 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:23 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/\x01\x00\x00 \x7f\x00', 0x2, 0x84002) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) mmap(&(0x7f0000b34000/0x3000)=nil, 0x3000, 0x0, 0x9012, r4, 0x20000000) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) flistxattr(r5, &(0x7f0000000040)=""/67, 0x43) 00:05:23 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x1, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:23 executing program 5: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) 00:05:23 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:23 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 567.990504] device bridge_slave_1 left promiscuous mode [ 567.996046] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.067329] device bridge_slave_0 left promiscuous mode [ 568.074151] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.147814] device bridge_slave_1 left promiscuous mode [ 568.154656] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.220845] device bridge_slave_0 left promiscuous mode [ 568.227571] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.281426] device bridge_slave_1 left promiscuous mode [ 568.288192] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.341299] device bridge_slave_0 left promiscuous mode [ 568.347350] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.402038] device bridge_slave_1 left promiscuous mode [ 568.408420] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.460857] device bridge_slave_0 left promiscuous mode [ 568.466541] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.842030] device hsr_slave_1 left promiscuous mode [ 568.882788] device hsr_slave_0 left promiscuous mode [ 568.934238] team0 (unregistering): Port device team_slave_1 removed [ 568.944176] team0 (unregistering): Port device team_slave_0 removed [ 568.959372] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 568.995863] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 569.055388] bond0 (unregistering): Released all slaves [ 569.133498] device hsr_slave_1 left promiscuous mode [ 569.172860] device hsr_slave_0 left promiscuous mode [ 569.224436] team0 (unregistering): Port device team_slave_1 removed [ 569.234261] team0 (unregistering): Port device team_slave_0 removed [ 569.247414] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 569.293355] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 569.355577] bond0 (unregistering): Released all slaves [ 569.452736] device hsr_slave_1 left promiscuous mode [ 569.503976] device hsr_slave_0 left promiscuous mode [ 569.562684] team0 (unregistering): Port device team_slave_1 removed [ 569.575097] team0 (unregistering): Port device team_slave_0 removed [ 569.584603] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 569.613749] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 569.695864] bond0 (unregistering): Released all slaves [ 569.792526] device hsr_slave_1 left promiscuous mode [ 569.841769] device hsr_slave_0 left promiscuous mode [ 569.894120] team0 (unregistering): Port device team_slave_1 removed [ 569.906437] team0 (unregistering): Port device team_slave_0 removed [ 569.919012] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 569.955112] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 570.038601] bond0 (unregistering): Released all slaves 00:05:25 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:25 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[0x80000001, 0xff]}) r4 = dup2(r1, r1) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:25 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x43c0c0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.opaque\x00', &(0x7f0000000180)=""/72, 0x48) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x401, 0x0, 0x10000, 0xf89}) ioctl$DRM_IOCTL_AGP_FREE(r5, 0x40206435, &(0x7f0000000080)={0x8000, r6, 0x0, 0x6}) mmap(&(0x7f0000ae0000/0x1000)=nil, 0x1000, 0x2, 0x8010, r3, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) ioprio_set$uid(0x3, r8, 0x6) 00:05:26 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:26 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe400f0ed54cf67d4df9c66c1dbfa70") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x400001) [ 574.060929] IPVS: ftp: loaded support on port[0] = 21 [ 574.979944] chnl_net:caif_netlink_parms(): no params data found [ 574.989183] IPVS: ftp: loaded support on port[0] = 21 [ 575.049009] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.055531] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.062465] device bridge_slave_0 entered promiscuous mode [ 575.075356] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.081864] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.088741] device bridge_slave_1 entered promiscuous mode [ 575.100823] IPVS: ftp: loaded support on port[0] = 21 [ 575.118747] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 575.127920] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 575.148431] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 575.156837] team0: Port device team_slave_0 added [ 575.169568] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 575.176764] team0: Port device team_slave_1 added [ 575.184940] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 575.201694] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 575.314055] device hsr_slave_0 entered promiscuous mode [ 575.380417] device hsr_slave_1 entered promiscuous mode [ 575.472984] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 575.487625] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 575.499548] chnl_net:caif_netlink_parms(): no params data found [ 575.529862] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.536297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.542968] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.549321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.564375] IPVS: ftp: loaded support on port[0] = 21 [ 575.593794] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.601047] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.607992] device bridge_slave_0 entered promiscuous mode [ 575.615350] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.621774] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.628724] device bridge_slave_1 entered promiscuous mode [ 575.717479] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 575.727735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 575.767928] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 575.774673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.784362] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 575.806572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 575.814938] team0: Port device team_slave_0 added [ 575.824580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 575.831983] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.838682] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.846559] chnl_net:caif_netlink_parms(): no params data found [ 575.863967] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 575.870759] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.877353] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 575.885255] team0: Port device team_slave_1 added [ 575.890844] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 575.919486] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 575.998584] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 576.007053] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 576.014990] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.021410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.094050] device hsr_slave_0 entered promiscuous mode [ 576.150444] device hsr_slave_1 entered promiscuous mode [ 576.191032] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 576.205820] chnl_net:caif_netlink_parms(): no params data found [ 576.215690] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 576.223142] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 576.237049] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.243799] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.251918] device bridge_slave_0 entered promiscuous mode [ 576.262076] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.269309] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.276279] device bridge_slave_1 entered promiscuous mode [ 576.282372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 576.290195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 576.297693] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.304078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.318242] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 576.344403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 576.359958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.394486] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 576.414418] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 576.425409] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.432009] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.439108] device bridge_slave_0 entered promiscuous mode [ 576.447451] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 576.464946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.475909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 576.488724] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.495410] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.502929] device bridge_slave_1 entered promiscuous mode [ 576.516785] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 576.526295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 576.536494] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 576.554647] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 576.563108] team0: Port device team_slave_0 added [ 576.572271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 576.580854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 576.589022] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 576.607984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 576.617585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 576.624955] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 576.632541] team0: Port device team_slave_1 added [ 576.637789] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 576.648930] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 576.657227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.665026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.672876] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.680459] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.694304] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 576.709888] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 576.722690] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 576.728722] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.794283] device hsr_slave_0 entered promiscuous mode [ 576.830533] device hsr_slave_1 entered promiscuous mode [ 576.870638] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 576.889209] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 576.896507] team0: Port device team_slave_0 added [ 576.904364] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 576.912266] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 576.918775] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 576.926391] team0: Port device team_slave_1 added [ 576.934356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.942735] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 576.955931] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 576.966367] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 576.975879] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 576.984572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 576.992307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.001581] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 577.007652] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.027372] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 577.049122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.057411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 577.114320] device hsr_slave_0 entered promiscuous mode [ 577.170662] device hsr_slave_1 entered promiscuous mode [ 577.210650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.218487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.226568] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.232956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.247234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 577.255271] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 577.263910] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 577.271485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.278527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.295230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.303200] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.309592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.319483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 577.333703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.344783] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 577.359879] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 577.367805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 577.377583] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 577.394376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.402585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.412429] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 577.422765] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 577.444747] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 577.452572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.460866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.468670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.476331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.504724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.520821] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 577.529928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 577.541889] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 577.548032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 577.557648] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 577.568633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 577.575735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 577.590611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 577.598161] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.605347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.620426] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 577.635248] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.644849] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:33 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:33 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:33 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r1, r1) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5eb58c040000003ff77a4a5225c27cafe00bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 577.677622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.700302] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 577.706406] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.717731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.751147] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 577.761863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 577.771269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 577.779152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 577.787587] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.793992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.801176] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 577.810668] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 577.820439] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.826908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.840382] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 577.853235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 577.888619] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 577.895679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.903323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 577.912094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 577.919317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 577.937697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 577.972633] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 577.979286] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.986815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.002618] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 578.009638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 00:05:33 executing program 5: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) creat(&(0x7f0000000100)='./file0\x00', 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) 00:05:33 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 578.025802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 578.052808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.105498] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 578.131258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 578.139753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.150878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 578.167578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 578.184392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 578.200746] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.207168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.216996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 578.242568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 578.249844] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 578.258609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.267534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.275556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 578.286023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 578.293701] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.300087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.309220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 578.324918] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 578.332318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.339785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.349266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 578.377270] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 578.386325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 578.402537] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 578.408613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.426376] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 578.434506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 578.444477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 578.458803] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 578.466070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.473380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 578.481723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 578.491986] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 578.505634] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 578.513227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 578.525817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 578.535063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.550007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 578.557927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.567081] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 578.578549] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 578.585267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 578.605992] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 578.616467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.977442] binder: 11743:11744 unknown command 25358 [ 578.983134] binder: 11743:11744 ioctl c0306201 20008fd0 returned -22 [ 579.037167] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.045377] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:34 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:34 executing program 5: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)=0x0) io_submit(r0, 0x0, 0x0) 00:05:34 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 579.240488] device bridge_slave_1 left promiscuous mode [ 579.246117] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.340990] device bridge_slave_0 left promiscuous mode [ 579.346597] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.411351] device bridge_slave_1 left promiscuous mode [ 579.416874] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.480808] device bridge_slave_0 left promiscuous mode [ 579.486420] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.541536] device bridge_slave_1 left promiscuous mode [ 579.547066] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.601092] device bridge_slave_0 left promiscuous mode [ 579.606667] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.651163] device bridge_slave_1 left promiscuous mode [ 579.656677] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.701100] device bridge_slave_0 left promiscuous mode [ 579.706632] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.874617] device hsr_slave_1 left promiscuous mode [ 579.934386] device hsr_slave_0 left promiscuous mode [ 580.003765] team0 (unregistering): Port device team_slave_1 removed [ 580.016560] team0 (unregistering): Port device team_slave_0 removed [ 580.026073] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 580.073868] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 580.164940] bond0 (unregistering): Released all slaves [ 580.252843] device hsr_slave_1 left promiscuous mode [ 580.323712] device hsr_slave_0 left promiscuous mode [ 580.373117] team0 (unregistering): Port device team_slave_1 removed [ 580.383919] team0 (unregistering): Port device team_slave_0 removed [ 580.393298] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 580.464341] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 580.547370] bond0 (unregistering): Released all slaves [ 580.661964] device hsr_slave_1 left promiscuous mode [ 580.703404] device hsr_slave_0 left promiscuous mode [ 580.762952] team0 (unregistering): Port device team_slave_1 removed [ 580.773895] team0 (unregistering): Port device team_slave_0 removed [ 580.783284] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 580.825500] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 580.913290] bond0 (unregistering): Released all slaves [ 581.021833] device hsr_slave_1 left promiscuous mode [ 581.064999] device hsr_slave_0 left promiscuous mode [ 581.132991] team0 (unregistering): Port device team_slave_1 removed [ 581.143454] team0 (unregistering): Port device team_slave_0 removed [ 581.152800] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 581.203702] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 581.273753] bond0 (unregistering): Released all slaves 00:05:37 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:37 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x4000) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000480)=0xe8) getgroups(0x1, &(0x7f00000004c0)=[0xee00]) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r7, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001a80)=0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {0x8, 0x0, r12}], {0x10, 0x6}}, 0x34, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r14, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r16, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r17 = socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r18, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r19 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r20) r21 = getgid() r22 = socket$nl_generic(0x10, 0x3, 0x10) r23 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r22, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r23, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r24 = gettid() ptrace$setopts(0x4206, r24, 0x0, 0x0) tkill(r24, 0x3c) ptrace$cont(0x18, r24, 0x0, 0x0) ptrace$setregs(0xd, r24, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r24, 0x0, 0x0) r25 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003c40)={0x0, 0x0}, &(0x7f0000003c80)=0xc) r27 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {0x8, 0x0, r28}], {0x10, 0x6}}, 0x34, 0x0) r29 = socket$nl_generic(0x10, 0x3, 0x10) r30 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r29, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r30, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r31 = socket$nl_generic(0x10, 0x3, 0x10) r32 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r31, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r32, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r33 = socket$nl_generic(0x10, 0x3, 0x10) r34 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r33, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r34, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r35 = openat$cgroup_subtree(r0, &(0x7f0000004300)='cgroup.subtree_control\x00', 0x2, 0x0) r36 = gettid() ptrace$setopts(0x4206, r36, 0x0, 0x0) tkill(r36, 0x3c) ptrace$cont(0x18, r36, 0x0, 0x0) ptrace$setregs(0xd, r36, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r36, 0x0, 0x0) r37 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r38) r39 = gettid() ptrace$setopts(0x4206, r39, 0x0, 0x0) tkill(r39, 0x3c) ptrace$cont(0x18, r39, 0x0, 0x0) ptrace$setregs(0xd, r39, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r39, 0x0, 0x0) r40 = getpgid(r39) r41 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r41, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r42) r43 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r43, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {0x8, 0x0, r44}], {0x10, 0x6}}, 0x34, 0x0) r45 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r46 = socket$nl_generic(0x10, 0x3, 0x10) r47 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r46, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r47, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r48 = socket$nl_generic(0x10, 0x3, 0x10) r49 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r48, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r49, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r50 = openat$full(0xffffffffffffff9c, &(0x7f0000004340)='/dev/full\x00', 0x80800, 0x0) r51 = socket$nl_generic(0x10, 0x3, 0x10) r52 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r51, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r52, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r53 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r54 = socket$nl_generic(0x10, 0x3, 0x10) r55 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r54, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r55, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r56 = socket$nl_generic(0x10, 0x3, 0x10) r57 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r56, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r57, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r58 = socket$nl_generic(0x10, 0x3, 0x10) r59 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r58, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r59, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r60 = socket$nl_generic(0x10, 0x3, 0x10) r61 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r60, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r61, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r62 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000004380)='/dev/video0\x00', 0x2, 0x0) r63 = socket$nl_generic(0x10, 0x3, 0x10) r64 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r63, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r64, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r65 = socket$nl_generic(0x10, 0x3, 0x10) r66 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r65, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000008", @ANYRES16=r66, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) fstat(r65, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r68 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r68, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {0x8, 0x0, r69}], {0x10, 0x6}}, 0x34, 0x0) r70 = socket$nl_generic(0x10, 0x3, 0x10) r71 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r70, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r71, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000046c0)={0x0, 0x0}) r73 = geteuid() r74 = getegid() r75 = socket$inet(0x2, 0x3, 0xbee5) r76 = socket$nl_generic(0x10, 0x3, 0x10) r77 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r76, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r77, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r78 = socket$nl_generic(0x10, 0x3, 0x10) r79 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r78, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r79, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r80 = socket$nl_generic(0x10, 0x3, 0x10) r81 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r80, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r81, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r82 = socket$nl_generic(0x10, 0x3, 0x10) r83 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r82, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r83, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r84 = socket$nl_generic(0x10, 0x3, 0x10) r85 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r84, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r85, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r86 = socket$nl_generic(0x10, 0x3, 0x10) r87 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r86, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r87, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r88 = syz_open_dev$sndpcmc(&(0x7f0000004700)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x141000) r89 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004740)='/dev/video2\x00', 0x2, 0x0) r90 = socket$nl_generic(0x10, 0x3, 0x10) r91 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r90, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r91, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r92 = socket$nl_generic(0x10, 0x3, 0x10) r93 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r92, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r93, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r94 = socket$nl_generic(0x10, 0x3, 0x10) r95 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r94, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r95, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r96 = socket$nl_generic(0x10, 0x3, 0x10) r97 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r96, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r97, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r98 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004780), 0xc) r99 = epoll_create1(0x80000) r100 = socket$nl_generic(0x10, 0x3, 0x10) r101 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r100, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r101, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r102 = getpid() r103 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r103, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r104) r105 = socket$nl_generic(0x10, 0x3, 0x10) r106 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r105, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r106, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r107 = socket$nl_generic(0x10, 0x3, 0x10) r108 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r107, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r108, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r109 = socket$nl_generic(0x10, 0x3, 0x10) r110 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r109, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r110, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r111 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000047c0)='/dev/video0\x00', 0x2, 0x0) r112 = socket$nl_generic(0x10, 0x3, 0x10) r113 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r112, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r113, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r114 = socket$nl_generic(0x10, 0x3, 0x10) r115 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r114, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r115, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r116 = socket$nl_generic(0x10, 0x3, 0x10) r117 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r116, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r117, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r118 = gettid() ptrace$setopts(0x4206, r118, 0x0, 0x0) tkill(r118, 0x3c) ptrace$cont(0x18, r118, 0x0, 0x0) ptrace$setregs(0xd, r118, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r118, 0x0, 0x0) r119 = getpgrp(r118) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004cc0)={{{@in=@broadcast, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000004dc0)=0xe8) r121 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r121, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {0x8, 0x0, r122}], {0x10, 0x6}}, 0x34, 0x0) r123 = openat$full(0xffffffffffffff9c, &(0x7f0000007900)='/dev/full\x00', 0x400000, 0x0) r124 = accept4$nfc_llcp(r0, &(0x7f0000007940), &(0x7f00000079c0)=0x60, 0x180800) r125 = socket$nl_generic(0x10, 0x3, 0x10) r126 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r125, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r126, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r127 = socket$nl_generic(0x10, 0x3, 0x10) r128 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r127, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r128, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r129 = socket$nl_generic(0x10, 0x3, 0x10) r130 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r129, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r130, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r131 = socket$nl_generic(0x10, 0x3, 0x10) r132 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r131, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r132, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r133 = socket$nl_generic(0x10, 0x3, 0x10) r134 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r133, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r134, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r135 = socket$nl_generic(0x10, 0x3, 0x10) r136 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r135, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r136, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r137 = socket$nl_generic(0x10, 0x3, 0x10) r138 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r137, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r138, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r139 = socket$nl_generic(0x10, 0x3, 0x10) r140 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r139, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r140, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r141 = socket$nl_generic(0x10, 0x3, 0x10) r142 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r141, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r142, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r143 = socket$nl_generic(0x10, 0x3, 0x10) r144 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r143, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r144, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r145 = socket$nl_generic(0x10, 0x3, 0x10) r146 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r145, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r146, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmmsg$unix(r0, &(0x7f0000007ac0)=[{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="0144fd98bc92930ff62520929ea3feb3b7f70f07517900b5649165452ff3e91a934c594152e388adec8b79df816b0b05de00d4cd83a04eba46570a4cd2a64c51a60f0a7019718284def2b4025c3108ad7f5ecf33829577cc6e6aa8c355195a5fdacc69582c6bc5d603ae92c00ace5b1a534312003dced1e1b04fc1f4ec628966e10b2fd96fbeb6511179d99278634c6570335495a54c02173e0e0c30d2acac5dbbad30365c1a9e83be935737e89f2e", 0xaf}, {&(0x7f00000000c0)="862055b7316d7da2767254872b3eb9c8ff242006a78649e10433c8d2f36a300575fe553c9c450567755323", 0x2b}, {&(0x7f0000000200)="bfd40bb3e08689b50aa7074dabfe4ab0dec8a6ab212d976f1c96f622a0bf1f09dd8bf099e2243ac2165907b8880d57a804184afb5b8ffc37ad2d7af9161c69182a38c35d36d398022f0e17056979ab3d7324900b62", 0x55}, {&(0x7f0000000280)="1bfbdc807d171ff2baaad5e2ad389711f051b8bcad8df9b7ed842fd5a5837811df28718862d5e55d3dc9aa80160e5d478c19e395dcd516497b831c4efe71e3e1bbcb68827cba2ab28ef32068fb00dfa5cc2143a67cbda6d1354699e4804c68f68c8ab6323c14bc1997b9ee78d33800e4de8dc52ed2f1adeb9c56192f5e4ea368fdace7269ebd7fca2b3f0780eabc8e6a1b959f5ce4943947e76840ebe87eed8aec6510f75bf3544e6710be983ab6acba2291311441125bd804f6bb4a869512c1", 0xc0}], 0x4, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}], 0x20, 0x48800}, {&(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000005c0)="9233c208998612df6264d5ea3a02efaeac6583d11b1bf9fd89352bcd07533707b278ddca5e6a201d657d8c507d7702341eee44770e66844c95ff004c9496381d806b2a6c9f4ece008464dadc47e27189d5b8b7fd0db4cff3503074b91f4927fd3497d4b37416d9d86a43ffc3c0e97fc9dccadf71ef8bd7c949d42f326f59724c85c682292301c88b89906cff3c1a9ce3f91ed3fcd756226f76bffcfa52f73595269ab2c9ab2c48eb1a6a", 0xaa}, {&(0x7f0000000680)="ef787332155fe2218b56170f9db1c9aaa226c4f578d40642ee2b98df1972f2039cdcc350fadf37109a32f789083c8f09bda3ad5ab6a595491987a09a1e330134b3f7c084a4273a319f55bb1651071aa647df998db4dee10a1a8ddc9879f91cc0cafe75a886f88dd8140d5ebb9f00fd900081f41248210426a646dc49024296403259097803343f4f1ec490d68f2528c11a809e5867546ef0c8f05074a795fd80512c644424131eaa782322a7de266cb1ccf1b5afb5fb9b42", 0xb8}, {&(0x7f0000000740)="c5995c4d21a3f9f4aeda1f144559c7a1c5fb8b64234956aec8302336b34dd63b3d721f6a328b88e3e792b8f3706b82b2ff485afb1f48d72416ec2f77", 0x3c}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="3f8b4bea6a4f760134691d16d18a59e0815831034c6453cfadaea157b5744eb0b072b36c69dc391e5926be807ed34e276520b0281a0298586fe8976e6dcd29676e70d1c2bc731220504c479c8731c6a96b0ee65c089ca73b633b5d69", 0x5c}, {&(0x7f0000001800)="4f15f7246514acd33c7158ec4af5fcb504cc8e57f5968feaa13f6eed360d86d378d6fda0a6032217807527facc", 0x2d}, {&(0x7f0000001840)="257371dc34c8725049f862c1c81bf4465bebf8bec19af75716f01c97645e2db45c7f9819c24e690c2ee338d66144d0b1f3bfcd1a5f528cdc7221292ec9168438ecfc90bf0230091a54186cd13fa9047e3397b88c417d90cdc58361fc2b6a9796346682f42cd79d8e2a79416182abf5de9c585339dface1bd63a8e7f231c6461762f31226c878d1782cf954a3e5dd4c9b2aba25b6b77643182170edcb8da100ebe8169526a93e1402bb74be34a9a5067ab6183a6fe9f537ec9df05f3d8fd7aaa308154d008a9d048bebd53bf84556a1c76974719b5e069140c37b31", 0xdb}, {&(0x7f0000001940)="e4cd350d5352c0a3381805692dd13af91188cd0fab096e76d3dd18627b840561cfe15369e2192bb426b2c39ec9b33cea945fae4f763d5735f5deb55fe99de841f451a32ce8eddbe178262e05b9e4d34ed4521c2702f4ea5b1a917d38d2c913e4becf619d5c57c43fa930f82e9d02629f291f36231081bbc3f5a1e5dfcb3ff47ffc93fa93f3e96327658a85d682fa59f3590ffe2c19515c71fd640902cb18d5b9ad559ce664", 0xa5}], 0x8, &(0x7f0000001ac0)=[@cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}, @rights={{0x18, 0x1, 0x1, [r13, r15]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r1, r17]}}, @rights={{0x18, 0x1, 0x1, [r2, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r20, r21}}}], 0xa8, 0x108c0}, {&(0x7f0000001b80)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="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", 0x1000}], 0x2, &(0x7f0000003cc0)=[@rights={{0x18, 0x1, 0x1, [r2, r22]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r24, r25, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r26, r28}}}], 0x70, 0x200000c0}, {&(0x7f0000003d40)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004280)=[{&(0x7f0000003dc0)="2f69e4c3f1bf31fcc0b485ef5c963864e493603c08c60e634977b69eac800028303a938055baf11c20ae3aa9c8cdb778819758777fca79bd0902d7d17adba30b3a178bdd5fce8a5017bfeda7a2cfc74a0bb0f1a0da2e3c6a8503a564192bf828e50294bf4e9fc2f75a489c00c066cb9306cad8cd3e49075389ce7832d61b5ec2b9343a764a3a", 0x86}, {&(0x7f0000003e80)="89d6fc98171a2e8a5fe39be20573e433cace6f06623c55867b58e7bb0163344f20b68dea2cc09fb642477273a81494", 0x2f}, {&(0x7f0000003ec0)="46103c8b8cd9a12056c29f8b8594a773f55ba31469a525c77b20fb383ec400df522ed44db0de805c4445e42f3b3b6f71b76692e4f1944cd8ebb19997fcea7577600bff68308024172b5a2b", 0x4b}, {&(0x7f0000003f40)="654cfafb6b510da1d0ff186a16c9c4656dca811a2a68b1aced4c7a8c40eaf116eef5dad05a63f4eb0f5dae0506b689785e5b919eb890dbf6dd64ecd427642af25e48613dae6347b3bd0dc94af42a7fff594cb09f90adbc2c8ff170427afcbf4156a6fc7db13dce3676d8e438a9e960ade629bb21cc20a97eb0631633de3c40291818bc0712545bc728d77c306378f378bd490038cd68b4c25615bc7408d7df8a25128701a2d33b60ad32b0b577", 0xad}, {&(0x7f0000004000)="785ad637531471ef889885a410bec149d5a957daa726a43f4aa3aa7d0e7dc7cc6d3872c1ea3d4ad7ac070fc874151cccd694f84582a28fd5bddd3cee24cd529364f6c18b2a3541754cf6ef2bf0cc03216664becbcf15d236b039ef653c2ea98d711af28ce2a1c4daff2f3769c24333d3507c1786b6ec938f0b38dc5c32efd6f5db047b43ac585f17807b3680438c600690ec4688ddae0ae1fafe95ccd6173036f1ab6f043a3593b19781ff897cf0ea348548a846d7f592508cccfa3651dd45", 0xbf}, {&(0x7f00000040c0)="537d7ed96e09caf62d9f29c60a0fe78ff289d845a240d628e3e1ad9b464300e99398aa1d8e735305364bbbb48fb26565eccf00177465b3f6efebb1725de2308a2bb3f9cab93ef46c8150776efd895b791b3d02e71a3bc756d7ceab64488fc1077f733869e0d879c0ede506daad51a26ad18adc18c7aaba47e9153c5948e79b469a5b81d8280a2da5983e52581c734af2e1ee4ccaeb84bcbe6a974085b6ef6cac74fb575bee735707fb8ff0c2c35100667596a04c46eaa17b5032a2010833b2a2aaebd466ca14eb4f7ec08b6e2a4666936a0d289dedacef6b2dcf183f77d57df1f845f10d2f2ef82558c0998ac49582eba6da5648d6", 0xf5}, {&(0x7f00000041c0)="eb1652405658ff0662d3af89a17f9c07583b2043f4332cd1c5ade172c57e6678fb3455b33f686a782eaa19b33b7fa5c3fd0a45d78ea58b622641fbf2d04c801c4f2a753bb3e8fe15057d7dbc430356243969e770b4b4892d08dcf1c8002f16d9a42b3ad81be4b2179ae85eab65cb9ede8ab50bec8d61a77e0f92c7933108aff5f1515df9536a9aa3a29ef290da1ebf77bcf2ec1be36ef922473c2fbd38d53dde5a10e2921895cd212a3503bdba741c42", 0xb0}], 0x7, &(0x7f0000004440)=[@rights={{0x2c, 0x1, 0x1, [r29, r31, 0xffffffffffffffff, r1, r33, r35, r1]}}, @cred={{0x1c, 0x1, 0x2, {r36, r38, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r40, r42, r44}}}, @rights={{0x30, 0x1, 0x1, [r45, r46, r48, r50, r0, 0xffffffffffffffff, r51, r53]}}, @rights={{0x28, 0x1, 0x1, [r54, r56, r58, r60, r62, r63]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r67, r69}}}, @rights={{0x18, 0x1, 0x1, [r70, r1]}}], 0x100, 0x4000000}, {&(0x7f0000004540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004680)=[{&(0x7f00000045c0)="f09a1bdabf6d5642d0af60fb5a8a656dde6052139960503f13dd666d9032d76b0d9908969d22236c2a3133bee952769d9f47075128d0c3acf95f82fa8644c6fc02f1445d7ab079f9a56b16fd591059d3f7dae02e2e58ae130268c2f87819786a6eaf668f067be38da35960ccda7156831b69831413c0e915fa613a7eefe6eeaf5012a474d3bb8b92dee59eed580ef9f22f766488beb4", 0x96}], 0x1, &(0x7f0000004800)=[@cred={{0x1c, 0x1, 0x2, {r72, r73, r74}}}, @rights={{0x24, 0x1, 0x1, [r75, r76, r0, r78, r80]}}, @rights={{0x30, 0x1, 0x1, [r82, r84, r86, r88, r1, 0xffffffffffffffff, r89, r90]}}, @rights={{0x30, 0x1, 0x1, [r92, r94, r96, r98, 0xffffffffffffffff, r99, r100, r0]}}, @cred={{0x1c, 0x1, 0x2, {r102, r104, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, r0, r105, r107, 0xffffffffffffffff, r109]}}, @rights={{0x20, 0x1, 0x1, [r111, r112, r114, r116]}}], 0x118, 0x4000}, {&(0x7f0000004940)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004c80)=[{&(0x7f00000049c0)="c992f4fdc22c0d24cb4c8a94c2072697f0b1e1bf893b3dee61f9d037fb9737aedf292feffed36d84fb07cb8f23456b5a4bfd5d15d215937a9bdbee31295e9a03406c25a4ddcf2d6b83a9ecaeb55e54847c564f880a3c64c24925378f50fff0a4c984a5fda1de0a192a175e4344b725d9d2da2406f000e9426c230bbcbfc0ffec870d129a2b9c0b234e067152424b4fb0a80d4fa46548e1b510", 0x99}, {&(0x7f0000004a80)="21c264a862e1fe6e4e961b6c40cac6512aff0f3d04b320de4f092e4798d58d847ba0d51cf54f9a491e87ddb8e8597cc811db82d05655a08cd33c1e1a02fe65af2333f3110998ab445b5124956607e65fbf792f47643b0e04dacc373694aad5ec8902478b63c037b71cf10b1c3d080b758126e6c78013842d7254a3fdb104334a40ee7770b7362e44f459d346b3fb2da16fe7b7", 0x93}, {&(0x7f0000004b40)="3ce0a7c8270998a5f5db7944aed1d648f20514aca3282187ae8f493f00f5b06f4cf00eb87940fb8644cbcb3ac19e2996d5386b2343ad03dffeed3980a67278a560f07eb8fcf002ca38b154267b4025d0f7c3e2506d02661522f0c25d913a258528b53c0d2b023594f44d1aa320123c5316901ed24d195e3378a61ad4c8e28d54f07ff09631444a955bc196e9fb4db0fd993d6c74462b697786522be5808ba13b6bd1ce1808ac1dbef1af3640dce012ca41378db9dc20bcec29f88f78dc5e1cda3846e52d36023d875688", 0xca}, {&(0x7f0000004c40)}], 0x4, &(0x7f0000004e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r119, r120, r122}}}], 0x38, 0x80}, {&(0x7f0000004e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006340)=[{&(0x7f0000004ec0)="40085ab79460aaa799df675c7a8eba4963b0a63c373ca64da0ca10ce1870221a0e3a885a8ee4e184f9a7f97c1d1617d9232377cb6531b3b4347f3a4734d48d1fc09e624651956295486e1b1d0f711a65524aae18fdaa9c062d2dca143c84377a01b6501740df5eb7bfe0337a40c71eaf1f1bf60f2bdb7758c370f3b6bf4e68cc4c929cb7e176db5ea99568696b308d96571c9f8ea0555bd4d4b98c1d9c373a40fb8bb4109d5d46f2284cbb1c67e5ba8337a8753fc4a279a3ed2263dd", 0xbc}, {&(0x7f0000004f80)="691d2d29774abbe44dfa5869fb10646c39f8931ef483fb603f212f109e338e2447bdde2d2b7fecdb27515ffb92d9d43a722f15d68e6c712dcb9cde747d3bb0b99a953cf68dd21c5c66f05ee4352490a2b5a7768df9731486e320645f3ee2a8b9ff42", 0x62}, {&(0x7f0000005000)="fa37de2c2b83619031319721615262b1ddd174870064848c34f3608b984c665bcc1d6f7c1318bb52b5d530b260a57d159ba00199e6d83aa6eb31d45c5bb47177a9971134075a112539c7831afc4ffdf575b6954a2191e56bd1787b7fcc74c337af652c8f8d7637fbed6a974767181fb1b0a334912d332911e1bd0cfc943f0c8435bd722eebf7011ee8cbb40180195a36082ac7fce894b9bc411634f0024c16ad9f8e453f4646371195844a10304ee0df770f51c56cb4f3c5f11a1a7a6fc0bbb2829aa102", 0xc4}, {&(0x7f0000005100)="af8f8941b814b3d20269c925f68d1dad13c285d1458c65b008867797f8137a75f499edf0b67afa9e6aa3f9e2cb7315752ccec258ba3664dc7a8c09a66d4950466a79c0cea149999a881d8a91fa6e7d805bbc03ae21179f8125721929b7512647b573c0", 0x63}, {&(0x7f0000005180)="ad822bf43a224b4fd2a109f8dd9271baba5c117646489b794e34b534a57b370d02f0a8b44fe5b1fe182829965ce1925484aa8cda563a8ef21a0e0382e9529ea34340", 0x42}, {&(0x7f0000005200)="19600ec8bd6bcf7b8958e6ca5f714613387cff49513982fb225f474358092ed2c39f5bb60c3da21f45b6b7d0319b1666e287dc1b0ff98460c6530bf95c428916e608b039fcf760fe5097a2cc06c255536dfa5bd41e5ff67fb172970f4e5c07dd6e76bc", 0x63}, {&(0x7f0000005280)="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", 0x1000}, {&(0x7f0000006280)="018869ddf9c2a2bae42f66aaa22b5121ab1fc61dfd267cc6538ba966e0089946e644e1cf4070e44feaed2d32dd56fbbc97ead97a9c0f5acba22435891d0f0f3cecdd6cc461167f8d4b2cb32ec9ad9fdd2e9490edb0bc8fb3db5dc78206c04a1ef006ab02ad0295ca16632296c55d5f5e1b2cd983778011d16b6aecfcb995e3c5b85c45b7cfe1b8edf44c29b15f59ab5de6400ab83c521e08f2ca3f8614f712f11b36f5c1a421b70b4e44c4a75d6d5be98f3e30710977ab04148b17", 0xbb}], 0x8, 0x0, 0x0, 0x80}, {&(0x7f00000063c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000007880)=[{&(0x7f0000006440)="71d73ed378eca5267e2a4cb903175b81d47b167f59279083ee984a7e691c235a5701f6e46dcc6dc2b14f26a8a4be7ff6ccb3e9e6a742ac8935d57931a66da4852f790f1acd50198af7e214d91bbf147e63ec2fa4862c2cebabe371d12d82ed90b8992495", 0x64}, {&(0x7f00000064c0)="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", 0x1000}, {&(0x7f00000074c0)="e0daf97391acf2f43dc486d3d225934f8be5f9e03f9ac048c2f76961c07b1b36388a15b3c8ecdb890b942040af1f7c18ef748a04bbf1398c7d709bc881f12a2d2f9f7f837dce3d3afe0a0cca52a2900022c9301922593a743c840e6727937a99", 0x60}, {&(0x7f0000007540)="cc280c902c9a0372ba780c0167903f83f1dca05b84bc9a3f5ffba48efd013eb139f2ad3d6d284727ea7306ef9fdd7301a8ce01fd5cde245cd5e53f3cda4fcfc26d3c5685761a44da9c4fe5d92152f0101c558138954c8836bde88e02c728d9294583980379a7655e5bbb6ae37f9689b61bc91f6242e33a28b3291e6e7eb8d1aff5336784c923d8da88dfc54a8bb379199e895bee47ca8ac62ea3f5f96437ed633310b38ce509a48a3559968ffec21c605537c5bece5f6d7aa674fa7f8040a32d6567a1bf328ac18ed84c", 0xca}, {&(0x7f0000007640)="ad07295ec4a2a3438bc7549c6ab4a831602e4b8574b5a99c639a196f098d8a0a56a60e6bc672b0614d4117afa246b70323adb16ebce4daa37230225aa0161ea2e438da5f4143d72590abab1f1dea4894259df52ac74aae55cf4cd5ff7dcfe33020aa48a750985d8a47f70c56661645fa2ae7378154c1ded4c6913370868fa5bb2c7e04f24062cfad47e5f8673e7de2b884c2b9628dbd19d875086300532bc991c3d772a194a5bb1fd876", 0xaa}, {&(0x7f0000007700)="f5ef85b189a6f5e9832d85307bd5290e6885a864caa00241cc4ccb8d0ddfd5a3ea3bd684b556debfae42a0598a0f4c2375f8fe20558fd90f5a3f46cd885c57bc017bd7dcc3d48471a1c87ef1c3e7da79707c0c278fa23b4b263e9c01e72c609314", 0x61}, {&(0x7f0000007780)="a587fc54372627f7668c1e7193c77fa4001fb0acacaf189feff2fef696ee6ae54f19a017b866ed26d414ead4369642e91c8df1087d2c9c9bdc92e2d5bb4c562cf9eba34b1ccce2b9b1ec5a3f9a023808afa2b11c00d62bc66a1557f0a7fd13d09f2dc5768ed35c9454c25ef9f71668c35a0159da8e351a59d5f85a0401285801f64a2cfed18e6ab1b99f717340e472f708b39602e841d573b5685ea5e229cbd07410654fd213e46600615a665094cdf8b33175f7e6e00baa8d51bb694a43d5772638dc58c742661067a92eba7c0c8ec694d1ab5ff8438e299048f8da263d20d74a9a12", 0xe3}], 0x7, &(0x7f0000007a00)=[@rights={{0x24, 0x1, 0x1, [r123, r124, r0, r2, r125]}}, @rights={{0x18, 0x1, 0x1, [r1, r127]}}, @rights={{0x30, 0x1, 0x1, [r2, r1, r129, r0, r2, r131, r133, r135]}}, @rights={{0x18, 0x1, 0x1, [r137, r139]}}, @rights={{0x1c, 0x1, 0x1, [r141, r143, r145]}}], 0xa8, 0x1c5dabbcc81a4625}], 0x8, 0x8000) r147 = dup2(r1, r1) ioctl(r147, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:37 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:37 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 581.340686] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.347291] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:37 executing program 5: seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0xffffff7f7ffffffe}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) 00:05:37 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 581.480233] binder: 11763:11765 unknown command 25358 [ 581.510100] binder: 11763:11765 ioctl c0306201 20008fd0 returned -22 00:05:37 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:37 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 581.554654] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.561344] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:37 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:37 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = gettid() ptrace$setopts(0x4206, r5, 0x0, 0x0) tkill(r5, 0x3c) ptrace$cont(0x18, r5, 0x0, 0x0) ptrace$setregs(0xd, r5, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r8, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r9}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r5, r7, 0x0, 0xd, &(0x7f0000000000)='/dev/usbmon#\x00', r9}, 0x30) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x9443, {{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x15}, 0x9}}}, 0x88) fcntl$setownex(r3, 0xf, &(0x7f0000000080)={0x2, r10}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r11, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r12 = dup2(r2, r1) ioctl(r12, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:37 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 585.651436] IPVS: ftp: loaded support on port[0] = 21 [ 586.458175] chnl_net:caif_netlink_parms(): no params data found [ 586.491289] IPVS: ftp: loaded support on port[0] = 21 [ 586.499588] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.506074] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.513261] device bridge_slave_0 entered promiscuous mode [ 586.519890] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.526391] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.533657] device bridge_slave_1 entered promiscuous mode [ 586.554301] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 586.563923] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 586.581188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 586.588275] team0: Port device team_slave_0 added [ 586.593857] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 586.601107] team0: Port device team_slave_1 added [ 586.606275] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 586.613601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 586.672822] device hsr_slave_0 entered promiscuous mode [ 586.720491] device hsr_slave_1 entered promiscuous mode [ 586.763647] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 586.774493] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 586.807189] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.813629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.820413] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.826792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.835432] IPVS: ftp: loaded support on port[0] = 21 [ 586.921716] chnl_net:caif_netlink_parms(): no params data found [ 586.983623] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.990175] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.997047] device bridge_slave_0 entered promiscuous mode [ 587.008000] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.015039] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.022402] device bridge_slave_1 entered promiscuous mode [ 587.052279] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 587.067339] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 587.084290] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 587.090477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.107811] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 587.115037] team0: Port device team_slave_0 added [ 587.128200] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 587.135742] team0: Port device team_slave_1 added [ 587.185415] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 587.191961] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 587.199305] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 587.217155] chnl_net:caif_netlink_parms(): no params data found [ 587.234848] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 587.245989] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.257524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.270503] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.277472] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.353156] device hsr_slave_0 entered promiscuous mode [ 587.390364] device hsr_slave_1 entered promiscuous mode [ 587.440882] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 587.448165] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 587.456153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 587.463833] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.470196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.477188] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 587.485135] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.491572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.498661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 587.506813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 587.514457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 587.524108] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 587.537333] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 587.550300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 587.557248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 587.565354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 587.596721] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 587.603186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 587.613053] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 587.627642] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.634981] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.642513] device bridge_slave_0 entered promiscuous mode [ 587.649272] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.655938] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.663014] device bridge_slave_1 entered promiscuous mode [ 587.742477] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 587.752429] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 587.782047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.796582] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 587.815633] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 587.825980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 587.833873] team0: Port device team_slave_0 added [ 587.846824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 587.858683] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 587.866651] team0: Port device team_slave_1 added [ 587.872960] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 587.879282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 587.887931] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 587.896673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 587.904190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 587.916474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 587.924738] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.953263] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 587.996328] device hsr_slave_0 entered promiscuous mode [ 588.050412] device hsr_slave_1 entered promiscuous mode [ 588.090332] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.098166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.105926] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.112346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.119598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.131819] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.140171] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:44 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = dup2(r1, r2) getpeername$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:44 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 588.174005] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 588.183889] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 588.192360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.200787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.219897] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.226368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.254292] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 588.264652] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 588.283700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.316168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 588.337221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.353841] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 588.373097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 588.381062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.388770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.416544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 588.430316] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 588.437799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 588.457683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 588.473888] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 588.495753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 588.505229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 588.529114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 588.546631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 588.567840] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 588.580599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 588.598789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 588.607178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 588.637082] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 588.665285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.699645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.739561] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 588.763421] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 588.769646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 588.790691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 588.814921] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 588.821876] 8021q: adding VLAN 0 to HW filter on device team0 [ 588.829999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 588.837239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 588.845478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 588.853539] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.859902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 588.873539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 588.882912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 588.891028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 588.898912] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 588.906843] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.913264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 588.923182] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 588.930735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 588.944826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 588.952202] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 588.967103] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 588.974372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 588.982181] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 588.991303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 589.010673] binder: 11801:11802 unknown command 25358 [ 589.016739] binder: 11801:11802 ioctl c0306201 20008fd0 returned -22 [ 589.039975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 589.049605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 589.058504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 589.069473] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.077892] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.101342] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 589.113886] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 589.125434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 589.134437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 589.142025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 00:05:44 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:44 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x2, 0x10001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000bf7000/0x4000)=nil, 0x4000, 0x1000002, 0x8012, r0, 0x0) 00:05:44 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 589.149509] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 589.158874] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 589.165425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 589.217239] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 589.260448] 8021q: adding VLAN 0 to HW filter on device batadv0 00:05:45 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x901000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000140)="d53dfa96a9bfeb7beb472633dd4fed7667093d50093e4d9bd494b72a29c2892cc97647b1d7790bd5b61891a7fcc4182577c106044f6121bd8f765eb41220eb3b6f30eb686efa14edde7a47bb3284cfcf6b2337ae5dfaf160c1a1b9e0e5b3145eba3634fcf0427ded9dec1dc32e227832f0c3c86502dca9e53b9663aff7941eb3b9707c09dce2fdf487eda364db39b58c9ebedd7d173331001ad8f78d4b939412a8eb262b74255cfae5f837bb9516e79d970d01c498a0e3d2900a765f25f13bfdac4aa3fbe11e1e15adf9565152d6923bd599ca88d8711112e8cddec0a3f6c1947610d89f8b5acb8350a9f5988128c898ff2ebe") r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:45 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 590.092353] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.100315] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x440000, 0x0) ioctl$KVM_GET_CPUID2(r3, 0xc008ae91, &(0x7f0000000040)={0x1, 0x0, [{}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f00000000c0), 0x4) ioctl(r2, 0x9, &(0x7f0000000080)="11dca50d5e0bcfe47bf070d2c753094635c9c0f604d9c8db42f62ca9c8406b5b68c9cd0cbe0aa4ff4b1906") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:46 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x1000}, {r1, 0x140}, {0xffffffffffffffff, 0x1}, {r0, 0x8}], 0x4, 0xfffffffffffffffb) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = syz_open_dev$dmmidi(&(0x7f0000000240)='/dev/dmmidi#\x00', 0x8, 0x44) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r5 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x8080) execveat(r5, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='\x00', &(0x7f0000000340)='/dev/usbmon#\x00', &(0x7f0000000140)='$\x00', &(0x7f0000000180)='/dev/usbmon#\x00', &(0x7f00000001c0)='/dev/usbmon#\x00'], &(0x7f00000002c0), 0x1000) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:05:46 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 590.630555] device bridge_slave_1 left promiscuous mode [ 590.636101] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.691132] device bridge_slave_0 left promiscuous mode [ 590.696719] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.741079] device bridge_slave_1 left promiscuous mode [ 590.746538] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.800943] device bridge_slave_0 left promiscuous mode [ 590.806423] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.861094] device bridge_slave_1 left promiscuous mode [ 590.866564] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.920849] device bridge_slave_0 left promiscuous mode [ 590.926347] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.982643] device bridge_slave_1 left promiscuous mode [ 590.988107] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.030717] device bridge_slave_0 left promiscuous mode [ 591.036200] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.091725] device bridge_slave_1 left promiscuous mode [ 591.097199] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.140740] device bridge_slave_0 left promiscuous mode [ 591.146218] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.332045] device hsr_slave_1 left promiscuous mode [ 591.366218] device hsr_slave_0 left promiscuous mode [ 591.404244] team0 (unregistering): Port device team_slave_1 removed [ 591.413755] team0 (unregistering): Port device team_slave_0 removed [ 591.423017] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 591.455188] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 591.513245] bond0 (unregistering): Released all slaves [ 591.601843] device hsr_slave_1 left promiscuous mode [ 591.642508] device hsr_slave_0 left promiscuous mode [ 591.702839] team0 (unregistering): Port device team_slave_1 removed [ 591.716292] team0 (unregistering): Port device team_slave_0 removed [ 591.725561] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 591.763426] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 591.852849] bond0 (unregistering): Released all slaves [ 591.942451] device hsr_slave_1 left promiscuous mode [ 591.983284] device hsr_slave_0 left promiscuous mode [ 592.023811] team0 (unregistering): Port device team_slave_1 removed [ 592.035123] team0 (unregistering): Port device team_slave_0 removed [ 592.045145] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 592.073292] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 592.153272] bond0 (unregistering): Released all slaves [ 592.242729] device hsr_slave_1 left promiscuous mode [ 592.295308] device hsr_slave_0 left promiscuous mode [ 592.352739] team0 (unregistering): Port device team_slave_1 removed [ 592.362925] team0 (unregistering): Port device team_slave_0 removed [ 592.372202] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 592.405371] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 592.473444] bond0 (unregistering): Released all slaves [ 592.552377] device hsr_slave_1 left promiscuous mode [ 592.593511] device hsr_slave_0 left promiscuous mode [ 592.633436] team0 (unregistering): Port device team_slave_1 removed [ 592.643833] team0 (unregistering): Port device team_slave_0 removed [ 592.653708] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 592.694188] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 592.753341] bond0 (unregistering): Released all slaves [ 597.751394] IPVS: ftp: loaded support on port[0] = 21 [ 598.792096] chnl_net:caif_netlink_parms(): no params data found [ 598.792215] IPVS: ftp: loaded support on port[0] = 21 [ 598.857637] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.864209] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.871336] device bridge_slave_0 entered promiscuous mode [ 598.884037] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.890562] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.897840] device bridge_slave_1 entered promiscuous mode [ 598.908693] IPVS: ftp: loaded support on port[0] = 21 [ 598.927862] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 598.937033] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 598.973572] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 598.981054] team0: Port device team_slave_0 added [ 599.018236] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 599.025433] team0: Port device team_slave_1 added [ 599.033551] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 599.041266] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 599.065400] chnl_net:caif_netlink_parms(): no params data found [ 599.142362] device hsr_slave_0 entered promiscuous mode [ 599.210367] device hsr_slave_1 entered promiscuous mode [ 599.274080] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 599.295481] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 599.307043] IPVS: ftp: loaded support on port[0] = 21 [ 599.311524] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.319000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.325647] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.332218] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.372012] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.378588] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.385703] device bridge_slave_0 entered promiscuous mode [ 599.409184] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.416591] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.424018] device bridge_slave_1 entered promiscuous mode [ 599.475811] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 599.508567] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 599.539403] chnl_net:caif_netlink_parms(): no params data found [ 599.558475] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 599.567132] team0: Port device team_slave_0 added [ 599.576519] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 599.585029] team0: Port device team_slave_1 added [ 599.592660] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 599.598834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.610480] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 599.618177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 599.652204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 599.724049] device hsr_slave_0 entered promiscuous mode [ 599.750473] device hsr_slave_1 entered promiscuous mode [ 599.802987] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 599.810629] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.817168] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.824880] device bridge_slave_0 entered promiscuous mode [ 599.831771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 599.839025] bridge0: port 1(bridge_slave_0) entered disabled state [ 599.846677] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.854318] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 599.871040] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 599.877381] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.887031] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 599.894779] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.904867] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.911805] device bridge_slave_1 entered promiscuous mode [ 599.957743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 599.979328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 599.988004] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 599.996106] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.003119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.012364] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 600.027617] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 600.039000] chnl_net:caif_netlink_parms(): no params data found [ 600.050425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 600.058147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 600.066004] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.072585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.085301] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 600.092958] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 600.109464] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 600.132412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 600.143019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 600.157093] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 600.166072] team0: Port device team_slave_0 added [ 600.171854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 600.189425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 600.197907] team0: Port device team_slave_1 added [ 600.208411] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 600.228904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 600.236930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 600.244884] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 600.254325] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 600.262310] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.268800] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.276799] device bridge_slave_0 entered promiscuous mode [ 600.284802] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.291837] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.298922] device bridge_slave_1 entered promiscuous mode [ 600.316614] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 600.325111] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 600.333483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 600.341615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 600.351016] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 600.360431] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 600.398527] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 600.406613] team0: Port device team_slave_0 added [ 600.415658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 600.452509] device hsr_slave_0 entered promiscuous mode [ 600.510540] device hsr_slave_1 entered promiscuous mode [ 600.551283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 600.559396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 600.567461] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 600.574951] team0: Port device team_slave_1 added [ 600.584617] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 600.595615] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 600.602787] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 600.610190] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 600.618409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 600.626603] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 600.639409] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 600.658433] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 600.665244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 600.713393] device hsr_slave_0 entered promiscuous mode [ 600.760468] device hsr_slave_1 entered promiscuous mode [ 600.802454] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 600.813354] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 600.821144] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 600.833661] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 600.847353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.864049] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 600.874008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.902478] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 600.909845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 600.921125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 600.930841] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 600.937399] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.946093] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 600.970495] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 600.979030] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 600.991578] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 600.999579] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.005982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.015577] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 601.026306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.033627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.042013] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.050046] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.057043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.077503] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 601.088810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.101058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 601.115795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.126120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.136519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 601.155734] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 601.163123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.171864] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.181809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.189972] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 601.199058] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.206410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.213408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.222521] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 601.230813] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 601.237218] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.247641] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 601.258664] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.265636] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.279323] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 601.286921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.295375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.303580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.311383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.319522] bridge0: port 1(bridge_slave_0) entered blocking state 00:05:57 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:57 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20020, 0x0) r3 = syz_open_dev$sndseq(&(0x7f00000007c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000000)={0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000040)) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 601.326091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.333320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.341445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.349952] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.359539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 601.388200] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 601.395500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 601.404330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 601.414918] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 601.422156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.429143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.437755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.446770] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.446797] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.447184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.447528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.449793] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 601.453461] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 601.463801] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 601.491182] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.510887] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 601.520514] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 601.527442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.535281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 601.542157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 601.549182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.557154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.565049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.586891] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 601.603463] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 601.611072] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.618075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 601.626266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 601.634130] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.640532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.647642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.655567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.664272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 601.674174] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 601.690968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 601.699918] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 601.714191] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 601.722062] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 601.729687] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.736070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.743165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.751248] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.758657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 601.766270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 601.774422] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 601.782717] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 601.797512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 601.807184] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 601.813906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 601.822105] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 601.831440] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 601.841436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 601.849302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 601.857191] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 601.871552] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 601.880891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.889512] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 601.896802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 601.906422] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 601.917072] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 601.939987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 601.947997] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 601.960378] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 601.978130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.987075] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 602.005021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 602.017884] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 602.027482] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 602.036351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 602.062390] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 602.073749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.132899] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.141413] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:57 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:57 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:57 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000140)='TIPC\x00', 0x5, 0x3) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') [ 602.298164] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.307124] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.398964] binder: 11891:11892 unknown command 25358 [ 602.413450] binder: 11891:11892 ioctl c0306201 20008fd0 returned -22 00:05:58 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:05:58 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:58 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 602.447956] binder: 11891:11893 ioctl c0306201 0 returned -14 [ 602.498034] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.508214] bridge0: port 1(bridge_slave_0) entered disabled state 00:05:58 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:58 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = socket$inet6(0xa, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={r6}, &(0x7f0000000080)=0xc) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x3) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r6, 0x8000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000140)={r7, @in={{0x2, 0x4e22, @rand_addr=0x8}}, [0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4, 0x8, 0x9, 0x20, 0x10001, 0x0, 0x5, 0x400, 0x9, 0xfffffffffffffff7, 0x100]}, &(0x7f0000000080)=0x100) preadv(r1, &(0x7f0000001480)=[{&(0x7f00000002c0)}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/117, 0x75}, {&(0x7f0000000400)=""/74, 0x4a}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x5, 0x0) r8 = dup2(r1, r1) r9 = socket$inet6(0xa, 0x5, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000040)={r11}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r11, 0x137d0976}, &(0x7f0000001500)=0x8) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 602.582261] device bridge_slave_1 left promiscuous mode [ 602.587774] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.660994] device bridge_slave_0 left promiscuous mode [ 602.666653] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.738410] device bridge_slave_1 left promiscuous mode [ 602.745322] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.800712] device bridge_slave_0 left promiscuous mode [ 602.806369] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.882019] device bridge_slave_1 left promiscuous mode [ 602.887594] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.950726] device bridge_slave_0 left promiscuous mode [ 602.956368] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.162170] device hsr_slave_1 left promiscuous mode [ 603.202885] device hsr_slave_0 left promiscuous mode [ 603.243107] team0 (unregistering): Port device team_slave_1 removed [ 603.253503] team0 (unregistering): Port device team_slave_0 removed [ 603.262658] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 603.313644] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 603.374912] bond0 (unregistering): Released all slaves [ 603.501924] device hsr_slave_1 left promiscuous mode [ 603.542957] device hsr_slave_0 left promiscuous mode [ 603.595191] team0 (unregistering): Port device team_slave_1 removed [ 603.604712] team0 (unregistering): Port device team_slave_0 removed [ 603.616012] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 603.653050] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 603.744966] bond0 (unregistering): Released all slaves [ 603.831772] device hsr_slave_1 left promiscuous mode [ 603.864066] device hsr_slave_0 left promiscuous mode [ 603.904516] team0 (unregistering): Port device team_slave_1 removed [ 603.914678] team0 (unregistering): Port device team_slave_0 removed [ 603.924549] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 603.964059] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 604.044499] bond0 (unregistering): Released all slaves 00:05:59 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:05:59 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x105100) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x200000) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) sync_file_range(0xffffffffffffffff, 0x5, 0x80000000, 0x8129610d827df70e) 00:06:00 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:00 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 607.281392] IPVS: ftp: loaded support on port[0] = 21 [ 608.243185] IPVS: ftp: loaded support on port[0] = 21 [ 608.250677] chnl_net:caif_netlink_parms(): no params data found [ 608.306224] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.312711] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.319578] device bridge_slave_0 entered promiscuous mode [ 608.329241] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.335718] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.343020] device bridge_slave_1 entered promiscuous mode [ 608.362818] IPVS: ftp: loaded support on port[0] = 21 [ 608.377612] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 608.388585] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 608.409323] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 608.416918] team0: Port device team_slave_0 added [ 608.422794] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 608.429831] team0: Port device team_slave_1 added [ 608.435505] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 608.443049] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 608.512423] device hsr_slave_0 entered promiscuous mode [ 608.560390] device hsr_slave_1 entered promiscuous mode [ 608.603139] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 608.618568] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 608.685356] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.691755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.698312] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.704683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.721067] IPVS: ftp: loaded support on port[0] = 21 [ 608.726644] chnl_net:caif_netlink_parms(): no params data found [ 608.846637] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.853204] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.860080] device bridge_slave_0 entered promiscuous mode [ 608.873240] chnl_net:caif_netlink_parms(): no params data found [ 608.889000] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.896244] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.903309] device bridge_slave_1 entered promiscuous mode [ 608.946632] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 608.987323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 609.009010] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 609.015201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 609.025961] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.032525] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.039495] device bridge_slave_0 entered promiscuous mode [ 609.063542] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.069971] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.077180] device bridge_slave_1 entered promiscuous mode [ 609.129476] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 609.136857] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 609.144707] team0: Port device team_slave_0 added [ 609.155468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 609.163560] team0: Port device team_slave_1 added [ 609.175061] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 609.186500] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.194149] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 609.202744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 609.209903] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.217495] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.229093] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 609.238217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 609.250613] chnl_net:caif_netlink_parms(): no params data found [ 609.259327] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 609.267702] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 609.276653] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 609.305068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 609.313091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 609.320803] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.327129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.335245] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 609.354910] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 609.362399] team0: Port device team_slave_0 added [ 609.367479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 609.375294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 609.382994] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.389324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.411310] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 609.418469] team0: Port device team_slave_1 added [ 609.472338] device hsr_slave_0 entered promiscuous mode [ 609.510434] device hsr_slave_1 entered promiscuous mode [ 609.560961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 609.575038] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 609.584040] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 609.599261] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 609.606697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 609.616730] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 609.624388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 609.649446] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 609.656113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 609.666151] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 609.687886] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.695298] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.702391] device bridge_slave_0 entered promiscuous mode [ 609.709339] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.716100] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.723366] device bridge_slave_1 entered promiscuous mode [ 609.736193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 609.744008] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 609.793377] device hsr_slave_0 entered promiscuous mode [ 609.850383] device hsr_slave_1 entered promiscuous mode [ 609.890830] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 609.908056] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 609.916357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 609.932330] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 609.939906] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 609.958826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 609.976482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 609.984721] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 609.998377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 610.005552] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 610.013035] team0: Port device team_slave_0 added [ 610.023822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 610.032175] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 610.042616] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 610.053191] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 610.061498] team0: Port device team_slave_1 added [ 610.066830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 610.078027] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 610.086657] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 610.099298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 610.116078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 610.124580] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 610.130759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 610.141815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.155044] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 610.224090] device hsr_slave_0 entered promiscuous mode [ 610.260390] device hsr_slave_1 entered promiscuous mode [ 610.311189] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 610.327501] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 610.337657] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 610.347837] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 610.357086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.364397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.373296] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 610.379425] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.401829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.409839] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 610.426667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.435385] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 610.444037] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.452964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.461216] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.467579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.474642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 610.489581] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 610.502237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.516444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.524571] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.531102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.540139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 610.551394] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 610.567187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 610.577218] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 610.585391] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 610.610990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 610.622685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 610.629508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 610.654688] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 610.666022] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.674042] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.698764] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 610.705301] 8021q: adding VLAN 0 to HW filter on device team0 00:06:06 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:06 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = dup2(r2, r1) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca52d5e596847bb2136") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:06:06 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 610.716666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 610.728851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 610.736712] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 610.754062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 610.807902] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 610.816710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 610.846211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 610.854518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 610.870765] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.877152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.926573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 610.934664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 610.950493] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.956890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.969715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 610.979363] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 610.993735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.017707] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 611.035233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.050892] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 611.059049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.097157] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.120826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.161669] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 611.180538] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 611.188949] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 611.201468] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 611.236488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.250841] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.267996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.285477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.297500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.307390] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 611.320305] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 611.326393] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.333071] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.340836] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.349400] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.362806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 611.370494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.378958] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.392753] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 611.406423] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 611.419777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.427386] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 611.439406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.447663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.455860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.463921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.471623] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.477973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.486443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 611.498751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.506025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.514039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.523308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 611.533183] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 611.542128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.549730] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.556226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.565496] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 611.573423] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 611.579473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.591159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.609313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 611.623773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.633752] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 611.642359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.649956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.658169] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 611.676146] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 611.691587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 611.716677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.723698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 611.732250] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 611.741323] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.749214] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:07 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 611.776138] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 611.789261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 611.806921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 611.820193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 611.828354] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 611.841210] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 611.847379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 611.862976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 611.872935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 611.884956] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 611.901106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.350576] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.361275] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:08 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:08 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/d\xe5v/dlmDPlock\x00', 0x42100, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)) syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0x80, 0x1, &(0x7f0000000240)=[{&(0x7f0000000140)="15f5797a8b7e1e81d0cd8003559cd43786da58a831eac5809f254819a3d6d0e07c275e74048962223678dbe71a6bfa3eda15c6f997ae0b6838590ee99dc9cec164e948f35a9631b66639bd4c682b3f40aa820a6904d17dc51b23c750228d6c2e8817f3868db465aadb2a5322872f1ef84151da9d2945672d60eeefc32d059dfb942ce48e305351fef948119fd6fcdda990bc5c7444b59b7182a00963e6152be33d32a405158bec32891a7b859398031abc7e40ee7591d40713bf547b3b51671054cb6c2976a77f3d9da12d0e5ab1baf23b6a912285974bd764158dc5c67ce84b65515c27ee75cddf88407014", 0xec, 0x8}], 0x10000, &(0x7f0000000280)={[{@nodots='nodots'}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@nodots='nodots'}, {@dots='dots'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/d\xe5v/dlmDPlock\x00'}}, {@pcr={'pcr', 0x3d, 0x35}}]}) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/us~mon#\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r1, 0x0) 00:06:08 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:08 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 612.421254] binder: 11965:11966 ioctl c0306201 0 returned -14 [ 612.459140] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.468283] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:08 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 612.498345] FAT-fs (loop3): Unrecognized mount option "smackfsfloor=/dåv/dlmDPlock" or missing value [ 612.559125] FAT-fs (loop3): Unrecognized mount option "smackfsfloor=/dåv/dlmDPlock" or missing value 00:06:08 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) 00:06:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x20000000000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000d7f000/0x3000)=nil, 0x3000, 0x6, 0x8e1a5238de1dde35, r0, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(0xffffffffffffffff, 0x40086408, &(0x7f0000000000)={0x5}) 00:06:08 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:08 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sync_file_range(r2, 0x2, 0xff, 0x4) r4 = dup2(r1, r1) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:06:08 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) [ 612.990466] device bridge_slave_1 left promiscuous mode [ 612.996030] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.051382] device bridge_slave_0 left promiscuous mode [ 613.056936] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.131417] device bridge_slave_1 left promiscuous mode [ 613.136955] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.190815] device bridge_slave_0 left promiscuous mode [ 613.196405] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.251435] device bridge_slave_1 left promiscuous mode [ 613.260673] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.311678] device bridge_slave_0 left promiscuous mode [ 613.317179] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.371091] device bridge_slave_1 left promiscuous mode [ 613.376564] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.441939] device bridge_slave_0 left promiscuous mode [ 613.447456] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.661840] device hsr_slave_1 left promiscuous mode [ 613.703134] device hsr_slave_0 left promiscuous mode [ 613.742912] team0 (unregistering): Port device team_slave_1 removed [ 613.753750] team0 (unregistering): Port device team_slave_0 removed [ 613.763795] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 613.815077] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 613.893899] bond0 (unregistering): Released all slaves [ 613.982571] device hsr_slave_1 left promiscuous mode [ 614.044215] device hsr_slave_0 left promiscuous mode [ 614.084525] team0 (unregistering): Port device team_slave_1 removed [ 614.094428] team0 (unregistering): Port device team_slave_0 removed [ 614.103761] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 614.146167] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 614.223663] bond0 (unregistering): Released all slaves [ 614.335718] device hsr_slave_1 left promiscuous mode [ 614.393828] device hsr_slave_0 left promiscuous mode [ 614.432938] team0 (unregistering): Port device team_slave_1 removed [ 614.443549] team0 (unregistering): Port device team_slave_0 removed [ 614.452731] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 614.494413] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 614.553537] bond0 (unregistering): Released all slaves [ 614.662472] device hsr_slave_1 left promiscuous mode [ 614.704061] device hsr_slave_0 left promiscuous mode [ 614.772947] team0 (unregistering): Port device team_slave_1 removed [ 614.783175] team0 (unregistering): Port device team_slave_0 removed [ 614.792523] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 614.833546] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 614.905889] bond0 (unregistering): Released all slaves [ 619.131345] IPVS: ftp: loaded support on port[0] = 21 [ 620.046042] chnl_net:caif_netlink_parms(): no params data found [ 620.053919] IPVS: ftp: loaded support on port[0] = 21 [ 620.089877] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.096347] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.103392] device bridge_slave_0 entered promiscuous mode [ 620.109974] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.116600] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.123932] device bridge_slave_1 entered promiscuous mode [ 620.156872] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 620.168423] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 620.193831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 620.201481] team0: Port device team_slave_0 added [ 620.209049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 620.216475] team0: Port device team_slave_1 added [ 620.221922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 620.229250] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 620.237907] IPVS: ftp: loaded support on port[0] = 21 [ 620.292436] device hsr_slave_0 entered promiscuous mode [ 620.330359] device hsr_slave_1 entered promiscuous mode [ 620.393150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 620.402972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 620.488976] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.495425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.502173] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.508540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.524542] IPVS: ftp: loaded support on port[0] = 21 [ 620.547200] chnl_net:caif_netlink_parms(): no params data found [ 620.669441] chnl_net:caif_netlink_parms(): no params data found [ 620.680981] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.687341] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.694848] device bridge_slave_0 entered promiscuous mode [ 620.727788] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.734575] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.742477] device bridge_slave_1 entered promiscuous mode [ 620.816198] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 620.856576] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 620.862941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 620.877828] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 620.913654] chnl_net:caif_netlink_parms(): no params data found [ 620.924750] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.931754] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.938828] device bridge_slave_0 entered promiscuous mode [ 620.946567] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 620.960952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 620.968198] team0: Port device team_slave_0 added [ 620.973380] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.979742] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.987637] device bridge_slave_1 entered promiscuous mode [ 621.013070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 621.020944] team0: Port device team_slave_1 added [ 621.028648] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 621.037981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 621.059916] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 621.067492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 621.078476] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 621.085831] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.092520] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.099371] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 621.115386] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 621.122657] team0: Port device team_slave_0 added [ 621.128588] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 621.134955] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.151715] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 621.158787] team0: Port device team_slave_1 added [ 621.178792] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 621.195195] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 621.202752] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 621.210507] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 621.218109] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.224495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.231746] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.241340] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.248294] device bridge_slave_0 entered promiscuous mode [ 621.292464] device hsr_slave_0 entered promiscuous mode [ 621.350379] device hsr_slave_1 entered promiscuous mode [ 621.390573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 621.397972] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 621.412830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 621.419890] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.426398] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.433770] device bridge_slave_1 entered promiscuous mode [ 621.452631] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 621.464702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 621.472543] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 621.480184] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.486620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.505335] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 621.572964] device hsr_slave_0 entered promiscuous mode [ 621.610762] device hsr_slave_1 entered promiscuous mode [ 621.691842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 621.701773] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 621.710378] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 621.727777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 621.737413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 621.745517] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 621.752818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 621.776401] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 621.783940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 621.793637] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 621.809206] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 621.816940] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 621.824753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 621.832915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 621.840610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 621.848041] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 621.855702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 621.863178] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 621.875980] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 621.883288] team0: Port device team_slave_0 added [ 621.894425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 621.901862] team0: Port device team_slave_1 added [ 621.907978] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 621.916800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 621.924690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 621.932318] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 621.947676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 621.955541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 621.965050] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 621.971361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 622.022345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.036747] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 622.082890] device hsr_slave_0 entered promiscuous mode [ 622.130349] device hsr_slave_1 entered promiscuous mode [ 622.170596] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 622.177816] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 622.189998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.207742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.222252] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 622.232259] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 622.241314] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 622.252327] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 622.259674] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 622.270439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.278287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.286125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 622.293477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 622.316580] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 622.323166] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.331443] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 622.337523] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.352980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 622.366106] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 622.380605] binder: 12007:12009 unknown command 25358 [ 622.387176] binder: 12007:12009 ioctl c0306201 20008fd0 returned -22 [ 622.391530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 622.406145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.414291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.422115] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.428462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.435515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.444067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.458676] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.465153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.472636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 622.480680] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 622.488328] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.494716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.502186] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.509255] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 622.519538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 622.531819] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.540372] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:18 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x200000000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r2, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8, 0x1, 'sfb\x00'}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, r7}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000fc0)={@mcast1, @local, @dev={0xfe, 0x80, [], 0x22}, 0xffffffffffffffc8, 0x2, 0x3, 0xd27d7f77e93cdbd3, 0x8, 0x4000000, r7}) socket$inet_sctp(0x2, 0x5, 0x84) r8 = dup2(r1, r1) r9 = request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f00000001c0)='/dev/usbmon#\x00', 0xfffffffffffffffd) write$binfmt_elf64(r1, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x7, 0x100, 0x1, 0x4, 0x3, 0x3, 0xae3e, 0x270, 0x40, 0x169, 0x9, 0x7, 0x38, 0x1, 0x9, 0x1f, 0x9}, [{0x0, 0x5, 0xfffffffffffffffb, 0x1, 0x7f, 0xfd06, 0x8, 0x8}, {0x60000000, 0xffff, 0x80, 0x7fffffff, 0x3, 0x6, 0x6, 0x6}], "a94c52a8cbc3d294c6e8c3bdae421dfbe8114ffb542b911c8027d95258d75da4770e682ec4aba4d153dfe6a12e86aa23b8265fd9ab153334beb898545f46c5382061b7728500ce20be1a30657897ab9779f5dde99f96965745", [[], [], [], [], [], [], [], [], [], []]}, 0xb09) r10 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000300)='/dev/usbmon\r\x04\xea\xe6H|#\x00\xdf~\xe9 5_/\x1d}\x91\x19\t\xbf\x1f\xa6\xe7C\xb8\xd2\xcdsX\f.\x9f\bo/\xc09hn\xc8Xr;\xae\xae4\x1d\x9e~\x82\xab\x91\"\xd8\xa9\xa3v\x05\xe3\x11\xd2\xcb&\xb8\xf9\xda\xf7$\xce\xa5\xd4@l\xd4\x92\xad\xc6\xbe', 0xffffffffffffffff) keyctl$reject(0x13, r9, 0x0, 0x0, r10) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup2(r11, r11) ioctl(r12, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r13 = socket$inet6(0xa, 0x5, 0x0) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r14, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r13, 0x84, 0x72, &(0x7f0000000040)={r15}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r12, 0x84, 0x70, &(0x7f0000000380)={r15, @in6={{0xa, 0x4e24, 0x9, @rand_addr="dc836354a687520da211ef60497e6dea", 0x3}}, [0x5, 0x4, 0x2, 0x8, 0x2, 0x81, 0x7ff, 0x152, 0x2, 0x8, 0x1, 0x8, 0x3, 0x52b, 0xfffffffffffffc01]}, &(0x7f00000002c0)=0x100) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r16 = socket$inet6_tcp(0xa, 0x1, 0x0) r17 = dup2(r16, r16) ioctl(r17, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000200)=0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r17, 0x29, 0x2a, &(0x7f0000000000)={0x3, {{0xa, 0x4e23, 0x956a, @local, 0xf00}}}, 0x88) 00:06:18 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 622.579655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.589869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 622.607785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 622.615756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 622.656422] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.662847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.697910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 622.712083] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 622.729178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.745298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 622.766933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.784130] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 622.811285] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 622.819808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 622.863706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 622.881124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 622.888766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 622.912978] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 622.922708] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 622.952948] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 00:06:18 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 622.970537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 622.977568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.001158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.008835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.050842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.060633] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 623.069200] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 623.105402] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 623.117750] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.141313] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 623.157145] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 623.165387] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.173046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 623.179878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 623.186838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.194788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.203276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.211140] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.218625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.227332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.237330] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 623.248851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 623.256321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 623.265635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 623.273837] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.280237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.287677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.295711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.305550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 623.314830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 623.325094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 623.332372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 623.340271] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 623.347835] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.354219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.362327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.369759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.379214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 623.394165] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 623.400781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.409491] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 623.444909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.452719] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 623.466536] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 623.484920] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 623.495234] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 623.509148] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 623.516331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 623.527896] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 623.536279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 623.546386] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 623.565013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 623.573608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.588045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 623.596742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 623.606420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 623.618442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.629656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 623.645688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 623.655705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 623.664599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 623.673068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 623.688599] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 623.695029] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 623.714100] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 623.725426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.106743] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.115165] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.149558] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.158685] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.252252] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.261261] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:20 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) read(0xffffffffffffffff, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:20 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:20 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:06:20 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x1a1004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:06:20 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) setuid(0x0) 00:06:20 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:06:20 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) mmap(&(0x7f0000bcb000/0x1000)=nil, 0x1000, 0x1000002, 0x100010, r2, 0x0) 00:06:20 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:20 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') socket$inet6(0xa, 0x803, 0x3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:20 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 624.650552] device bridge_slave_1 left promiscuous mode [ 624.656258] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.721088] device bridge_slave_0 left promiscuous mode [ 624.726634] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.781506] device bridge_slave_1 left promiscuous mode [ 624.787068] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.840862] device bridge_slave_0 left promiscuous mode [ 624.846393] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.901493] device bridge_slave_1 left promiscuous mode [ 624.917210] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.960892] device bridge_slave_0 left promiscuous mode [ 624.966436] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.021504] device bridge_slave_1 left promiscuous mode [ 625.037255] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.080770] device bridge_slave_0 left promiscuous mode [ 625.086306] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.262174] device hsr_slave_1 left promiscuous mode [ 625.302753] device hsr_slave_0 left promiscuous mode [ 625.344416] team0 (unregistering): Port device team_slave_1 removed [ 625.353981] team0 (unregistering): Port device team_slave_0 removed [ 625.363683] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 625.416040] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 625.484557] bond0 (unregistering): Released all slaves [ 625.582426] device hsr_slave_1 left promiscuous mode [ 625.623375] device hsr_slave_0 left promiscuous mode [ 625.664178] team0 (unregistering): Port device team_slave_1 removed [ 625.673844] team0 (unregistering): Port device team_slave_0 removed [ 625.684178] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 625.725219] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 625.794321] bond0 (unregistering): Released all slaves [ 625.871706] device hsr_slave_1 left promiscuous mode [ 625.892775] device hsr_slave_0 left promiscuous mode [ 625.952886] team0 (unregistering): Port device team_slave_1 removed [ 625.963373] team0 (unregistering): Port device team_slave_0 removed [ 625.972585] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 626.053280] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 626.146111] bond0 (unregistering): Released all slaves [ 626.251906] device hsr_slave_1 left promiscuous mode [ 626.292864] device hsr_slave_0 left promiscuous mode [ 626.334147] team0 (unregistering): Port device team_slave_1 removed [ 626.344250] team0 (unregistering): Port device team_slave_0 removed [ 626.353704] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 626.406233] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 626.473130] bond0 (unregistering): Released all slaves [ 630.721762] IPVS: ftp: loaded support on port[0] = 21 [ 631.662269] IPVS: ftp: loaded support on port[0] = 21 [ 631.671429] chnl_net:caif_netlink_parms(): no params data found [ 631.732000] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.738409] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.745995] device bridge_slave_0 entered promiscuous mode [ 631.752964] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.759489] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.766897] device bridge_slave_1 entered promiscuous mode [ 631.774451] IPVS: ftp: loaded support on port[0] = 21 [ 631.799811] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 631.809047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 631.831302] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 631.838359] team0: Port device team_slave_0 added [ 631.846435] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 631.853873] team0: Port device team_slave_1 added [ 631.863333] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 631.870712] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 631.964664] device hsr_slave_0 entered promiscuous mode [ 632.020503] device hsr_slave_1 entered promiscuous mode [ 632.082721] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 632.094547] chnl_net:caif_netlink_parms(): no params data found [ 632.108272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 632.167044] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.173465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.180098] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.186433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.211561] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.217920] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.225556] device bridge_slave_0 entered promiscuous mode [ 632.232475] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.238847] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.246505] device bridge_slave_1 entered promiscuous mode [ 632.297348] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 632.318518] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 632.325268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.352213] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 632.362081] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 632.373844] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 632.379965] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.393631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.411116] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.417994] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.433587] chnl_net:caif_netlink_parms(): no params data found [ 632.459878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 632.468476] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.474882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.495820] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 632.503159] team0: Port device team_slave_0 added [ 632.514739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 632.522607] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.528968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.536310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 632.544591] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 632.552189] team0: Port device team_slave_1 added [ 632.557756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 632.565651] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 632.583173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 632.599219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 632.621900] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.628334] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.636082] device bridge_slave_0 entered promiscuous mode [ 632.652583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.662381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.673109] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 632.684481] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.694387] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.701592] device bridge_slave_1 entered promiscuous mode [ 632.752507] device hsr_slave_0 entered promiscuous mode [ 632.790388] device hsr_slave_1 entered promiscuous mode [ 632.860560] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 632.868037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 632.875838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 632.883310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 632.912140] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 632.920260] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 632.932397] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 632.943746] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 632.952558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.967271] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 632.994448] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 633.007988] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 633.016055] team0: Port device team_slave_0 added [ 633.029725] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 633.036891] team0: Port device team_slave_1 added [ 633.042672] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 633.053281] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 633.124087] device hsr_slave_0 entered promiscuous mode [ 633.150361] device hsr_slave_1 entered promiscuous mode 00:06:29 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:29 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') socket$inet6(0xa, 0x803, 0x3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:29 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) rmdir(&(0x7f0000000140)='./file1\x00') [ 633.190741] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 633.198199] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 633.213327] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.221917] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.276342] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 633.322858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.336608] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 633.349970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.362316] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 633.384710] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 633.398179] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 633.407095] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.419442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.430151] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 633.438730] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 633.447986] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.458026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.468337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.490973] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 633.497087] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.518418] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 633.534667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.550648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.579136] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.585586] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.602655] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 633.611762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 633.633179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.646375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.664671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.680512] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.686955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.710483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.728579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.736568] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.743018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.753296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 633.762806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 633.775372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.783649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.791702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.799614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.807739] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.814167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.842763] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 633.868983] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 633.886671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.895448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.913478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.932925] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 633.950973] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 633.967464] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.984791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.992837] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.010640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.018350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.036745] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.058737] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 634.072327] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 634.089962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.108023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.115906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.134100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.152693] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 634.159056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.181762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 634.199795] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.212704] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.235693] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 634.246754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.255063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.267404] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 634.274139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.282092] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 634.301484] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 634.311077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.324559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.991774] binder: 12093:12094 unknown command 25358 [ 634.997050] binder: 12093:12094 ioctl c0306201 20008fd0 returned -22 [ 635.039084] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.047284] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:30 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet_udplite(0x2, 0x2, 0x88) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x280000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r5, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80, 0x59d002d10f81c360) ioctl(r6, 0x3, &(0x7f00000001c0)="11dca5055e0bcfec7bf070") getsockopt$inet_mreqsrc(r3, 0x0, 0x7b, &(0x7f0000000000)={@remote, @remote, @local}, &(0x7f0000000040)=0xc) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'veth1\x00'}, 0x18) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:06:30 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 635.093914] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.101841] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:30 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:31 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:06:31 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) mmap(&(0x7f0000a6a000/0x2000)=nil, 0x2000, 0x2000000, 0x100010, r2, 0x0) [ 635.158845] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 0, id = 0 00:06:31 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:31 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:06:31 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 635.417157] device bridge_slave_1 left promiscuous mode [ 635.423312] bridge0: port 2(bridge_slave_1) entered disabled state 00:06:31 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 635.460843] device bridge_slave_0 left promiscuous mode [ 635.466743] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.523068] device bridge_slave_1 left promiscuous mode [ 635.528635] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.595333] device bridge_slave_0 left promiscuous mode [ 635.602621] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.655480] device bridge_slave_1 left promiscuous mode [ 635.675648] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.730853] device bridge_slave_0 left promiscuous mode [ 635.736373] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.791528] device bridge_slave_1 left promiscuous mode [ 635.797038] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.860903] device bridge_slave_0 left promiscuous mode [ 635.866434] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.104363] device hsr_slave_1 left promiscuous mode [ 636.143645] device hsr_slave_0 left promiscuous mode [ 636.183873] team0 (unregistering): Port device team_slave_1 removed [ 636.219960] team0 (unregistering): Port device team_slave_0 removed [ 636.240153] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 636.284476] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 636.378811] bond0 (unregistering): Released all slaves [ 636.482564] device hsr_slave_1 left promiscuous mode [ 636.533696] device hsr_slave_0 left promiscuous mode [ 636.583755] team0 (unregistering): Port device team_slave_1 removed [ 636.603670] team0 (unregistering): Port device team_slave_0 removed [ 636.623646] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 636.680123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 636.777317] bond0 (unregistering): Released all slaves [ 636.882303] device hsr_slave_1 left promiscuous mode [ 636.923728] device hsr_slave_0 left promiscuous mode [ 636.964058] team0 (unregistering): Port device team_slave_1 removed [ 636.983126] team0 (unregistering): Port device team_slave_0 removed [ 637.002003] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 637.044352] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 637.186083] bond0 (unregistering): Released all slaves [ 637.312446] device hsr_slave_1 left promiscuous mode [ 637.353775] device hsr_slave_0 left promiscuous mode [ 637.395743] team0 (unregistering): Port device team_slave_1 removed [ 637.428285] team0 (unregistering): Port device team_slave_0 removed [ 637.454486] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 637.524085] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 637.616445] bond0 (unregistering): Released all slaves 00:06:33 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = syz_genetlink_get_family_id$net_dm(0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000410}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4000) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 641.910874] IPVS: ftp: loaded support on port[0] = 21 [ 642.921643] IPVS: ftp: loaded support on port[0] = 21 [ 642.928980] chnl_net:caif_netlink_parms(): no params data found [ 642.969070] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.975565] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.982970] device bridge_slave_0 entered promiscuous mode [ 642.998646] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.005130] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.012372] device bridge_slave_1 entered promiscuous mode [ 643.037108] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 643.047374] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 643.072864] IPVS: ftp: loaded support on port[0] = 21 [ 643.083994] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 643.091262] team0: Port device team_slave_0 added [ 643.099087] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 643.106471] team0: Port device team_slave_1 added [ 643.115363] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 643.124839] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 643.223575] device hsr_slave_0 entered promiscuous mode [ 643.280409] device hsr_slave_1 entered promiscuous mode [ 643.332339] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 643.339128] chnl_net:caif_netlink_parms(): no params data found [ 643.354849] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 643.377474] IPVS: ftp: loaded support on port[0] = 21 [ 643.381148] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.389055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.395655] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.402026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.444712] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.451582] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.458464] device bridge_slave_0 entered promiscuous mode [ 643.468064] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.474541] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.481882] device bridge_slave_1 entered promiscuous mode [ 643.519802] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 643.582153] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 643.603601] chnl_net:caif_netlink_parms(): no params data found [ 643.635097] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 643.642804] team0: Port device team_slave_0 added [ 643.643273] IPVS: ftp: loaded support on port[0] = 21 [ 643.648380] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 643.665645] team0: Port device team_slave_1 added [ 643.671277] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 643.679196] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 643.717365] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.724729] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.731888] device bridge_slave_0 entered promiscuous mode [ 643.751868] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.758232] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.768752] device bridge_slave_1 entered promiscuous mode [ 643.832677] device hsr_slave_0 entered promiscuous mode [ 643.870385] device hsr_slave_1 entered promiscuous mode [ 643.911272] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 643.918544] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 643.948064] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 643.954538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.961335] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.968449] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.975661] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 643.984839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 644.003479] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 644.031337] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 644.064411] chnl_net:caif_netlink_parms(): no params data found [ 644.078276] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 644.090474] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 644.096827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 644.103782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 644.128579] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 644.136212] team0: Port device team_slave_0 added [ 644.142070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 644.149140] team0: Port device team_slave_1 added [ 644.159129] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 644.165454] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.177960] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 644.196793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 644.211622] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 644.219444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 644.228544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 644.236241] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.242623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.264651] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 644.278290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 644.287891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 644.343160] device hsr_slave_0 entered promiscuous mode [ 644.380412] device hsr_slave_1 entered promiscuous mode [ 644.425503] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 644.436069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 644.443919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 644.451721] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.458045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.465225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 644.473354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 644.488045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 644.495161] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.501708] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.508652] device bridge_slave_0 entered promiscuous mode [ 644.515399] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 644.558732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 644.567325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 644.575583] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.582223] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.589073] device bridge_slave_1 entered promiscuous mode [ 644.641975] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 644.648843] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 644.655860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 644.663578] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 644.679021] chnl_net:caif_netlink_parms(): no params data found [ 644.695442] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 644.705364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.723794] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 644.736546] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 644.747547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 644.755425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 644.763143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 644.772626] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 644.781226] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 644.799969] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 644.808459] team0: Port device team_slave_0 added [ 644.813916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 644.822892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 644.833980] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 644.840365] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 644.858782] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 644.866029] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 644.873545] team0: Port device team_slave_1 added [ 644.878766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 644.898321] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.906285] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.913293] device bridge_slave_0 entered promiscuous mode [ 644.923934] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 644.931858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 644.938714] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 644.948329] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 644.954653] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.962273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 644.980380] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.986741] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.994583] device bridge_slave_1 entered promiscuous mode [ 645.043336] device hsr_slave_0 entered promiscuous mode [ 645.080507] device hsr_slave_1 entered promiscuous mode [ 645.128569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 645.144076] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 645.153079] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 645.162045] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 645.182734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.189887] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 645.197778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.205598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.213224] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.219662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.238063] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 645.245628] team0: Port device team_slave_0 added [ 645.253081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.268311] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 645.277080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 645.289981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.298830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.307156] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.314886] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.321282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.329101] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 645.338283] team0: Port device team_slave_1 added [ 645.343670] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 645.364274] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 645.375365] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 645.386108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 645.395837] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 645.407141] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 645.429411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.437973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.446019] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.456610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.471198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 645.479941] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 645.509168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 645.517514] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 645.525288] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.532458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.555786] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.563540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 645.571557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 645.612411] device hsr_slave_0 entered promiscuous mode [ 645.670542] device hsr_slave_1 entered promiscuous mode 00:06:41 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') socket$inet6(0xa, 0x803, 0x3) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 645.712502] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 645.720830] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 645.732991] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 645.740965] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 645.748495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 645.763312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 645.771118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 645.778808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 645.786687] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.793079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 645.800252] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 645.807141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 645.815232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 645.823428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 645.835062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 645.842626] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 645.849630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 645.857351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 645.864778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 645.872623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 645.880181] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.886519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 645.893506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 645.903083] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 645.909149] 8021q: adding VLAN 0 to HW filter on device team0 [ 645.926663] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 645.936510] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 645.948184] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 645.956018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 645.963813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 645.973412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 645.984599] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 645.994842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.003111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.010733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.018028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.025807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.038554] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 646.044967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.054698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 646.065493] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 646.086630] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 646.093397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.101053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.108360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.116159] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.124146] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.130539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.138886] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 646.152120] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 646.162636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 646.173728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.181668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 646.195406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.203346] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.209674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.216804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.224314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.233415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 646.248044] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 646.255069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 646.265686] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 646.274060] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 646.283839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.308702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.328210] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 646.337727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 646.350196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 646.366454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 646.376518] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 646.384631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.392145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.399885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.412589] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 646.440919] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 646.454872] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 646.463624] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 646.481217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.487874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 646.495776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 646.503072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.510864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.520720] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 646.526796] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.536227] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.544793] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.577587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 646.593889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 646.607022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 646.615149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 646.627205] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 646.635197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 646.643675] bridge0: port 1(bridge_slave_0) entered blocking state [ 646.650085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 646.657295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 646.666387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 646.681761] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 646.689617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 646.698247] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.704784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 646.712788] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 646.718907] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 646.728774] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 646.745691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 646.757808] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 646.765724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 646.780492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 646.788102] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 646.796344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 646.804863] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 646.829260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 646.847715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 646.855217] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 646.874964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 646.885596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 646.897946] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.910062] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.958468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.965471] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 646.974709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 646.985293] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 00:06:42 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f00000003c0)="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") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:06:42 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:42 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 647.007014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 647.017646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 647.039516] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 647.054454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 00:06:42 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40800, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000080f4ff3e500000d204000081af00000c00000018000000f700000000000000090000003c7afcff0100000018280000", @ANYRES32=r4, @ANYBLOB="00000000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xf4, &(0x7f0000000140)=""/244, 0x41100, 0x4, [], 0x0, 0xe, r2, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xd, 0x100000001, 0x7fff}, 0x10}, 0x70) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 647.095110] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 00:06:43 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 647.166298] 8021q: adding VLAN 0 to HW filter on device batadv0 00:06:43 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1449d664e7831053}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000aa270000022cbd7000fcdbdf2502141001dd00fe0b80020000a2b1d2e512a6ce9193a8dfd61a52480e44f4f3bae68451"], 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x800) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000180)) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040), 0x4) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 647.275332] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.284597] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:43 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 647.590470] device bridge_slave_1 left promiscuous mode [ 647.596377] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.652226] binder: 12196:12197 unknown command 25358 [ 647.657481] binder: 12196:12197 ioctl c0306201 20008fd0 returned -22 [ 647.671074] device bridge_slave_0 left promiscuous mode [ 647.676595] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.745667] device bridge_slave_1 left promiscuous mode [ 647.754080] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.810705] device bridge_slave_0 left promiscuous mode [ 647.816256] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.871258] device bridge_slave_1 left promiscuous mode [ 647.877955] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.931033] device bridge_slave_0 left promiscuous mode [ 647.936621] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.203972] device hsr_slave_1 left promiscuous mode [ 648.244292] device hsr_slave_0 left promiscuous mode [ 648.303362] team0 (unregistering): Port device team_slave_1 removed [ 648.323505] team0 (unregistering): Port device team_slave_0 removed [ 648.338491] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 648.395409] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 648.459885] bond0 (unregistering): Released all slaves [ 648.541834] device hsr_slave_1 left promiscuous mode [ 648.582612] device hsr_slave_0 left promiscuous mode [ 648.622938] team0 (unregistering): Port device team_slave_1 removed [ 648.633940] team0 (unregistering): Port device team_slave_0 removed [ 648.643726] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 648.693392] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 648.762977] bond0 (unregistering): Released all slaves [ 648.852770] device hsr_slave_1 left promiscuous mode [ 648.893899] device hsr_slave_0 left promiscuous mode [ 648.943285] team0 (unregistering): Port device team_slave_1 removed [ 648.954716] team0 (unregistering): Port device team_slave_0 removed [ 648.964602] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 648.994978] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 649.074980] bond0 (unregistering): Released all slaves 00:06:44 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(0x0, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:44 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:06:44 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000d2b000/0x4000)=nil, &(0x7f0000b6d000/0x2000)=nil, &(0x7f0000cc4000/0x1000)=nil, &(0x7f0000a33000/0x3000)=nil, &(0x7f0000b89000/0x1000)=nil, &(0x7f0000d0a000/0x1000)=nil, &(0x7f0000d82000/0x3000)=nil, &(0x7f0000a91000/0x3000)=nil, &(0x7f0000a3d000/0x1000)=nil, &(0x7f0000c4f000/0x1000)=nil, &(0x7f0000b70000/0x1000)=nil, &(0x7f0000000240)="85e8cfd9316c7e454423985fcf6ff3008865a2c4b663f31ec0d65a79f3cd3b040044291f841c2d26c684a6c27790dd4c95e5bc694ea022df14a95531f3c1bc4b237e08743041df9da2740596e16911ad90e157c90d698ca47c2b83f8e1837463b7a030d97da9d5799b73e52c58bf36e7cf8731e2b1490a5abde9feb1a6dcb0560ff734ec1d2dd8b8a4f4a31b4655c4a817563526e06fe30396f291fa48e7c9cf7996b22792f48e8fd332c66d07933e66f35d7633980ab1", 0xb7, r1}, 0x68) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffccb, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="143d95a691ebb8b49594dc00004000", @ANYRES16=r4, @ANYBLOB="0100fdfffffffcdbdf2503000000"], 0xa3}}, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000380)=0x3) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) r8 = socket$inet6(0xa, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000006b26706ba4b9b79ce07a6c340ef1661caab65c4292a62b707b561999c7d5bef6771d8fbce3f08b614fc3bfea8da3047aa04095e7cdff75eba0d918e683b4fe0a18", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000040)={r10}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000000)={r10, @in6={{0xa, 0x4e24, 0x82, @rand_addr="9d119f8696ad855c8913d51611381790", 0x1f}}, 0xfffffffffffffff7, 0x4}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r11, 0x0, 0x8f94, 0x3}, &(0x7f0000000180)=0x10) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 649.110549] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.117196] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.179077] binder: 12203:12204 unknown command 25358 [ 649.189925] binder: 12203:12204 ioctl c0306201 20008fd0 returned -22 00:06:45 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r3, 0x400, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000000)=0x2c, &(0x7f0000000040)=0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000b7d000/0x4000)=nil, 0x4000, 0x1000002, 0x8012, r0, 0x0) [ 649.332467] binder: 12209:12211 unknown command 25358 [ 649.344797] binder: 12209:12211 ioctl c0306201 20008fd0 returned -22 00:06:45 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") setsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000000)={0x5, [0x730, 0x200, 0xd6, 0x4, 0x5ad]}, 0xe) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000140)={{0x1000, 0x10000, 0xf, 0x7, 0x369, 0x3, 0x5ead, 0x4, 0x10000, 0x81, 0x9, 0x9}, {0x4f0348e0b5aece55, 0xd000, 0x4, 0x4, 0x52e, 0x724, 0xffffffff, 0x8000800, 0x800, 0x1, 0x5, 0x80000001}, {0x0, 0x2800, 0x9, 0x10000, 0x80000000, 0x7, 0x8, 0x0, 0x6, 0x7fffffff, 0x4, 0xffffffff}, {0x100002, 0x0, 0x416885f8568f5eea, 0x80000000, 0x2, 0x1, 0x3, 0x85, 0x6, 0x0, 0x8, 0x7f}, {0x1000, 0xd000, 0x9, 0x8, 0x4, 0x78a0, 0x6, 0x7, 0x9, 0x2, 0x2, 0x1ff}, {0x1000, 0xf000, 0x57433bb43446a6cf, 0x7fffffff, 0x1000, 0x1, 0x1, 0x0, 0x2, 0x400, 0x8, 0x5}, {0x4, 0x6000, 0xf, 0x0, 0xfd7f, 0x1, 0x101, 0x42, 0x2, 0x5, 0x1, 0x7}, {0x2, 0x15801, 0x0, 0x5, 0xfffffffffffffff8, 0xffff, 0xfffffffffffffe24, 0x2, 0xfffffffffffffbff, 0x2, 0x537ca0be, 0x81}, {0x9000, 0xb687bec9856044b9}, {0x2, 0x5000}, 0x10004, 0x0, 0x5000, 0x1024a0, 0xb, 0x9000, 0x116005, [0x2, 0x0, 0x40cc, 0x8]}) [ 652.420825] IPVS: ftp: loaded support on port[0] = 21 [ 653.212642] IPVS: ftp: loaded support on port[0] = 21 [ 653.230417] chnl_net:caif_netlink_parms(): no params data found [ 653.289063] IPVS: ftp: loaded support on port[0] = 21 [ 653.306967] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.313520] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.320733] device bridge_slave_0 entered promiscuous mode [ 653.366571] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.374144] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.381381] device bridge_slave_1 entered promiscuous mode [ 653.429577] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 653.437449] chnl_net:caif_netlink_parms(): no params data found [ 653.456344] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 653.519176] IPVS: ftp: loaded support on port[0] = 21 [ 653.532042] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.538454] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.545807] device bridge_slave_0 entered promiscuous mode [ 653.552618] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 653.559720] team0: Port device team_slave_0 added [ 653.576873] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.583429] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.590639] device bridge_slave_1 entered promiscuous mode [ 653.597052] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 653.604657] team0: Port device team_slave_1 added [ 653.617675] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 653.679327] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 653.687804] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 653.703565] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 653.782549] device hsr_slave_0 entered promiscuous mode [ 653.820428] device hsr_slave_1 entered promiscuous mode [ 653.863418] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 653.875172] chnl_net:caif_netlink_parms(): no params data found [ 653.885347] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 653.895688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 653.904265] team0: Port device team_slave_0 added [ 653.922293] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 653.929442] team0: Port device team_slave_1 added [ 653.944293] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 653.953202] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 653.973672] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.980082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.986661] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.993115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.039987] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.046507] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.053768] device bridge_slave_0 entered promiscuous mode [ 654.102489] device hsr_slave_0 entered promiscuous mode [ 654.140361] device hsr_slave_1 entered promiscuous mode [ 654.180867] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 654.188058] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 654.195060] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.201648] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.208519] device bridge_slave_1 entered promiscuous mode [ 654.240599] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.246993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.253679] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.260117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.304412] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.311860] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.319986] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.333436] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.361627] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 654.374995] chnl_net:caif_netlink_parms(): no params data found [ 654.402397] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 654.428753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.453028] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 654.462994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.479896] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 654.487857] team0: Port device team_slave_0 added [ 654.493714] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 654.501306] team0: Port device team_slave_1 added [ 654.506624] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 654.516162] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 654.524169] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 654.536984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 654.545211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.552526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.568361] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 654.574633] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.594715] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.601822] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.608755] device bridge_slave_0 entered promiscuous mode [ 654.615798] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.622707] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.629604] device bridge_slave_1 entered promiscuous mode [ 654.636737] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 654.665693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 654.672884] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 654.681662] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 654.724243] device hsr_slave_0 entered promiscuous mode [ 654.760372] device hsr_slave_1 entered promiscuous mode [ 654.805923] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 654.814468] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 654.820929] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.827416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.835432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.843503] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.849843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.864867] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 654.874040] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 654.882875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 654.892467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 654.900720] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 654.908222] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.914600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.923510] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 654.937985] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 654.953222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 654.961158] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 654.969648] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.976213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.992153] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 654.999227] team0: Port device team_slave_0 added [ 655.005147] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 655.014185] team0: Port device team_slave_1 added [ 655.020430] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 655.035544] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 655.043807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.053179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.060924] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.067269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.076302] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 655.088197] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 655.095462] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 655.103513] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 655.111502] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.121634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 655.131566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 655.145146] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 655.163359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.174133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.182436] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.195611] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.204388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 655.215096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 655.285643] device hsr_slave_0 entered promiscuous mode [ 655.340446] device hsr_slave_1 entered promiscuous mode [ 655.381601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 655.389359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.397294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.407388] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 655.416812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 655.429533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 655.438504] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 655.448097] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 655.460594] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 655.469128] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 655.476322] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 655.483852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.491444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.499016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 655.506810] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 655.524091] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 655.535715] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 655.547292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 655.555229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.563656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.571359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 655.578773] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 655.589098] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 655.595540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.609107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 655.628532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 655.636173] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 655.646234] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 655.652958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 655.679226] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 655.699109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.706883] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 655.718194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.729688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.738323] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 655.755160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.768214] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 655.775362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.782963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.792664] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 655.803070] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 655.809339] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.823130] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 655.829290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 655.836711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 655.846098] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 655.860863] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 655.868681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 655.883130] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.889648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.898830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 655.911045] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 655.917554] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.926581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 655.937828] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 655.945719] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 655.954533] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.960928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.983690] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 655.996128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.005761] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 656.024906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 656.033619] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 656.045529] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.051940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 656.060622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 656.074636] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 656.088501] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 656.096151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.104061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 00:06:51 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 656.112438] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 656.127824] bridge0: port 2(bridge_slave_1) entered blocking state [ 656.134258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 656.150823] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 656.156892] binder: 12253:12254 unknown command 25358 [ 656.159956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 656.168079] binder: 12253:12254 ioctl c0306201 20008fd0 returned -22 [ 656.172607] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 656.212827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 656.221043] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 656.228978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.236709] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.254787] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.262803] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.290834] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 656.300479] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.307370] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 656.315369] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 656.329854] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 656.343748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 656.351737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.368419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.379050] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 656.395530] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 656.424076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.432682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.440545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 656.448236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 656.459194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 656.477913] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 656.489064] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 656.499846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.508426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.516032] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 656.523728] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 656.532457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 656.539889] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 656.554820] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 656.561070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.570413] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 656.576457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 656.604205] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 656.628977] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 656.642038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.685922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 657.379064] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.386993] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:53 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 657.464542] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.472886] bridge0: port 1(bridge_slave_0) entered disabled state 00:06:53 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:53 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:53 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r3 = dup2(r0, r0) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000000)) r4 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r4, 0x0) 00:06:53 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:06:53 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 657.573494] binder: 12276:12279 unknown command 25358 [ 657.593016] binder: 12276:12279 ioctl c0306201 20008fd0 returned -22 00:06:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r1, 0x5441, 0x8) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x7, 0x1, 0x2c, 0xffffffff, 0x5}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) [ 657.630775] device bridge_slave_1 left promiscuous mode [ 657.637242] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.705197] device bridge_slave_0 left promiscuous mode [ 657.714649] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.771620] device bridge_slave_1 left promiscuous mode [ 657.778331] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.832083] device bridge_slave_0 left promiscuous mode [ 657.838766] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.897921] device bridge_slave_1 left promiscuous mode [ 657.905937] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.970747] device bridge_slave_0 left promiscuous mode [ 657.976311] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.031590] device bridge_slave_1 left promiscuous mode [ 658.038243] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.081341] device bridge_slave_0 left promiscuous mode [ 658.086908] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.394072] device hsr_slave_1 left promiscuous mode [ 658.433794] device hsr_slave_0 left promiscuous mode [ 658.483481] team0 (unregistering): Port device team_slave_1 removed [ 658.494318] team0 (unregistering): Port device team_slave_0 removed [ 658.503841] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 658.547190] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 658.625272] bond0 (unregistering): Released all slaves [ 658.701799] device hsr_slave_1 left promiscuous mode [ 658.742699] device hsr_slave_0 left promiscuous mode [ 658.794199] team0 (unregistering): Port device team_slave_1 removed [ 658.803767] team0 (unregistering): Port device team_slave_0 removed [ 658.813933] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 658.855155] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 658.943933] bond0 (unregistering): Released all slaves [ 659.023531] device hsr_slave_1 left promiscuous mode [ 659.063861] device hsr_slave_0 left promiscuous mode [ 659.103100] team0 (unregistering): Port device team_slave_1 removed [ 659.114842] team0 (unregistering): Port device team_slave_0 removed [ 659.124532] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 659.183063] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 659.265850] bond0 (unregistering): Released all slaves [ 659.372610] device hsr_slave_1 left promiscuous mode [ 659.413966] device hsr_slave_0 left promiscuous mode [ 659.463409] team0 (unregistering): Port device team_slave_1 removed [ 659.477084] team0 (unregistering): Port device team_slave_0 removed [ 659.486977] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 659.543290] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 659.625750] bond0 (unregistering): Released all slaves 00:06:55 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:55 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0x63, 0x6) r5 = dup2(r1, r1) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r6 = syz_open_dev$cec(&(0x7f0000000340)='/dev/cec#\x00', 0x3, 0x2) writev(r6, &(0x7f00000015c0)=[{&(0x7f0000000380)="4b4b1e19ed0443e16da57d9e5f71e85432bc0260dbc28f203e69080e43a79a17ceb4b5641d31ba9077d9c536d6091db9846266b1e3887be8326b31c846df82e8c0e807e280ae09bb47a698425a238ce44680ca8e475cf17a6752c8a9e381f98e3dcbef557d08d2dee7b5cd5d38cb8c7ccc9f73b0c1b09f98ce0cf544cfef188de8baab166048d78b0c7f77425aa921ce896a3eb03bf9d281e19f02148a1f52aafc0de41335b2a4aa1d416c6f186276c14a0897ad190a70dcb57757fbe7b2bec169be63fb7a832a810daabcfa1f922b8ab6f9bf6aefa4dcfbcbfa80ac3880f558e636048d68e9f322d82c34519fcddead9e8053e450841473fc3913c8258a60ebe81579ebb2a783721cfd41efa97ba486c3292a90c67815a81029ae6e35cadf97124c3aee988a7c1a273005bc46df964a3302055163dfaf065cf256588add5a2c1d8c3fb3e0fe970b55832f27ef02f1753480e36e4615e14730503318ed7e79390b4f7166c8ad0de42cd83e3d0fe6b2634b9739d9f21a9c2249d5af239bf6cab351eaf10a9c7eddaed344dc5bb926bfb1aecba0b9089a62fffb618fb9a6622c273d940f421f50a9a7bf47df406c800ea0b6b2761f36ba7e671586c0afffe7a68675343489dd58266ad3659c0fe295b619acbbda3d744066fc1cea9e3f5f56d40f42ea4f078fe0d351323be97a4f6238921cec3ad524b002fed2d1b175a3ad3a86022ef4f10034f466dce3650365c84148c183796e6c0752e8bd1ff1daeea9640ba27816051b66034c848cc65f56cd92d05d24b9e6df5858005c0803ce79f12ee5ac890817013e3764aab241199403b0127f07ae5e04f4a957f22253822d4ac63cc05399d17389f64fecadee928ad5d2acf50eb04c2858ce4c4d35e682e5aafd801800fb570bacab13fc0f0c852db9af4e15b79cd49318670f1a050c223a3c0e809ab6ad20671156a9a694a3e9dc334773a80722579e11cb10fa88f1c3c2660f4b6ca508f3270899661de2e3f87b8c637225e9e5f5397cf0f577c8aa6bfefa239fd458d23a864ccc727b942cf9e980255e7a809b8b006262b4f13450739aa20c349f01006f87c85b203f3e41c9d81a6e858f9adb0dfb7111a9de33de4cb62389ab06257ff3f197895f937a1a116d1a341b0461e206a9f862ce460538ffdf4b25780662b222cfd27b312c915aa39b579ecc66006e599b15b2349ebd7a67a3f5ef9927f9f361068866c6543412fcfed2d18966ebe4604a893207799b1c245d6a6de5f82ffd48d7a573f57c53f12d617bf431831d525f36bab308065267976387e5cdda556b7cd32a23bd934a2cfc252cb143007d24f336495887f9d9ad9168566c53c21a6deb04acf6f7e839c501a974c95ae3a67efb0ec42be23ccd067fee453fb45d16f38173172bc43953236492beacd16a7411dad5e84bc7d40b4dd35c15a862f289c3bbdca90a21fbd075bcf4a843c2e715203629063071a600ee41b07ea0e3b9c323b96622dce40f7a42c1e26c3d3667e063f4345893a64a32b9796841297705536872e67c4a94093080886117dd42654037d6d3d1d04d02de06fe50d6dea1fb5af16e8e8f7c8e1703c1e02fe43db11da1676069587124e5460e00a663dd73027df100c74dd5b6933ffa72f1ef3aca09b216dca130a5d0fe80216a1e8f61a0ba8b34539e6e1f5eba476bfc9b149a64d589b370707d8116e0e6cc5a47eb6971969a4f977d2d994535e76c37663b02626172679643d2f8442ccfbbaaaba7f4e15bdefd89a8b9d827f1485234389e93546cf9eb869adb2745ca46765ea0a03e4687189579ec2b91f25c78f52a06a389516914e061cca7ba04a9ec93372303f4b067ef09483fc26c4e548af869cd14f1c5cc9eb95d35571753adbae640bc060c118e391be94001ca0f3a762ca2fa8da0a4f7a1df69d548313bc95aa31b2a6d4b7d4365b0bf9f2ef1108c43a7de18bf5c6d3bd668eddf9f395bc1f6507704b88f44d69d9459f7f2b8059e00577c1bda7ee2d4e5839af9291b1cbccb3edabd1768412cbcd4e5af1d61d1615923bdc2bc5bc7a028e4d06950a2be1c34af0ef28aadc15ec8eab9f8d743d54bf2e3cb2d1875d05d7afa9921af3512e1510bcaa1d420fb915ebb3e3bb6c875971efc1c25a0d877ffad3e34445cc1de7a59e0b5bb1d6c6ea9d775bfb1bd98ba8ff6429b8b52e33fc4ac0bcbc244b38acc09095d8173f64c6bd700e50ec39fa33d6fee3dacec5ed756e6eb170c6aa4a81b5b09e7ae0cc94edcc0202d74601b50a7d11e78fe68d876869f14f0d18cc89f1b884a88b8a2ef922dba5cbb12df6a2c0c3f1797c46e303292639bd9c5cfa098107b84585db9a215315e90ce0fbb8449d504b832e441eff6253a91c9b18b9902375779c0bd455183353d586a1743be254c3d539ff29b59cd826492a7b77f6a64b068577494a05e562292977360e6dfbac1dd14def32f3bca62c52853126afb291b5af38a2e0b8c774d4e7ac1e6f666c851dbc3fcbadc9e29ada83b5d6fe187c7f5b9891bac864093033301dca264ba7c26e5557bc9568241f85d47e63c32d478a15c518987f5c47ad9144489f85b8ae8713941709884d558bfd26e43b80607cc72f91999e4a0ceb9b6537093d1e49296f16d8f418642613547c747ba089ba6e6961e30bf183daf608f1b18001c627f251710b3502b42f359a70e1c2962cde414199f773a9bb81f98229babda9b321df42208e5516d4e7e6fb4eabbc525270f3103bc447438f0537d304023d2ca7c9bd47963fa734d5de9492515a72db3497f887ff0587e0d3e189d33322332d6a890f7a857467033f00e992d8a7f76129941a1b01155189782741267f71f2046cb6f992a73d60e65aced615cd0e973eb021222948fb68114231dcbe5818deb7ad0b3e82019774cd7074ee1bbe8046a2d4422d7b0d5f447057717e00ae21640be8008206a84287ea2fcc521f4d4ad65392e6e6b3a7c03e344b87f67b77b11aafa807c9fea6f153f39bd18cd67f488b4ef93c20cf0d1234b5ff2b10a0dbd87f878a15635dcd9b9bb11fc7d730c9be7db45cfec4b2e216d34c3228e5f31a7f32aec0270218307dd2327f98f757f0db3b84540db384f2bf0935e369c5b30d51830264177b603223443dd1067d91d4531f55f931bb65cc3ecb3163df0160481d0ba0d1d758bc796881ced3e71aa00ce0be9017641a0722db0a429d60640f8bd598f3296e317a569443a5a86799a4df9c1d0ace0cda7f1a4339453b630239fb43a01b7a9285f5fe82fa81c6df0a02f7829446be5356350788e0bec355e7074525b64510cfee4b4c5b3e77741417aa6333629aab9aa247a5e0e56892f73126f6f96945c9ff6bf47fe79bebfe2e22d0ff2d8808b81487258748ac1c67a501b0169d12a19a90fe9f1454ceda1e134a96755a4c42a4d1af7922e6240b0d57657875124e037d0b85e84709106b8997a4e319febab31f4cee21a9da1c1c4f6b345c9efa1849cd7d7cda6df6d76d6bf6ce423779020cccc270ed433e14d808c71f7f535454d58deb833c60f1418f50a97982421ab3387f1328f2b3ed123d40cd69346aca9a71b1f6b63a9577f1df2a845ba2ab4837fb642c8e6d4e9dd7d2aae04aadb71cb8c4c47b4470aec1881f23c00553846e2ed4a3631a74fb8673ce7350a24d253aaffedfbdcddbb97e8c1fbfbcf8cfbf3c96efd93adaff60ade4b69ec54a872c5547df41a53d497516c73037690d0e259e381976fc28b4ffe7f8de1ddaec8af9cde53513e6a698bcfc062c9145c0c0405d3ff6f3b81c0bee58d5264b9c23f8c7e966244336d857cbaad053d75f76b2b35b65d0ea53cf2db8853d5bf380031c9434ae52cad93b85230dcda7fddc41b3a51a390185fe3c79eca2acc6888ca7aa2aa6f08c2220204e78eeef24afe007d92dc118b1c452ae7543444d83a8469c83f184c9735f712b5970862f81d648255a1fa64eee7f758bb8f99ebdd548f03768f42e4a9c12ef8cb08082dba8e928721ef0c662a1f68fd100bf79f2ebfe25305d70800ef0bc0c2f83ed7d4547a58df0bf2de3dac752e9c4f0a6b3b1297013bc74a5582fc04e0aa53183a4439d1e386a1a13496005dc2c14578cbe5bf2a349a2f841d5a9b2abfce22737ea79cfbd27dde40d8e1493886a2bbe219dbad982885d05e5f6a250b6d20368572cd0594a6346972c2a8411cef57e8e38a113634b08767dac2c913fd056583f0544613b8a1660f24a2c3d667741fec2ddcf1a255cff8c5840c7bbd3a2748d50debb8ccae9c3132cf466e9a56dc1994334acf9fc8c05587ceb6bc485bd4a3ae57e63afd71b4d29b682ac37d8b03da2d5238ca26eed0a94b44427f01c6bfc4ff9afd0fc29cc07326ed1f63b076e83ccdfee956ae47ff897d563459be09d89cc4201f0f9539567b7826823c87e03d4fee3710fba96151ec26b89b8559cce19245a789882ebaddbc667bcdd4393ecdc77e3df6b76fe7d58d62126dc0e3471109cc31904cd8fb2b8ad276660ba4d15c671edadbbb8ed106f65031ebd7ce4415635d53cadbd6a867b480c428cd68b8b91d164064bd37f1e84fa62fc63f9c5b70c3ee394ffe14adc5806ac0be446182bf90b48270e127f0676915ac02f51414d1deabbced3ebbb7b1dbfdcb570bebf9bbe706bb9b3e1d8571dbbdb066a9b3cec361954fe0500c15bf2b81bd8514cbee97c67e37aabcf93672e69cdeb210ef2b1fbc2c5d2e134903b3ebe49de8d39761aa8762c9c5ca784a673a16d15d2825d278ed245ceddca0ac477c1c5a67bf760333c0f1f865f84919a21eba90721a727ef2f3e6f69908180de3a78d201d8a6d50249c22df9366dcbdbe544ba95f7695673798d0876ab045026ff67c6e7998e04b452215c3d1bf0bba4e3061db765617659455a5f6af2f36e6b112e82e6e984dfde0646ec88edc73d8e32ffed64624d249620d3650849d8e1a788af1dbc5c79d5e1cb53cba1f0e294947f405881a596f2051e20433290cddfa6e45aaed8e4b2d9ab78dc0c5979ad7e33c823a5c357d175819f16d7888a0d2c3b9da4e8059a7c6a225ac4420601684bd9d260643879911d0531bb7d27dbd759b9c810b3ea28977644a0cea084fd16819fc786ff019a50dbea97f944e819178157c990a5c40f87e01ec0d206e2b8ca46101ce4bd216b01b4aa7e218d7336269feec3e87e553f0a6755820451ec1c0f7e9b72fecd09f1e502d1423361fee55039d31e5416b0c10ec7ea40497b9de18f8448bec4db1c838a1b9e8094234d266f86236c657e417fe3654b4828cb5f2599188d2d7ca84b4c7642e90260bf751bd97519449aacbaa80639f10e14a2c08f48464a7da9d5e9ba80fae68e8e7cc07f70a54d31a6b6c93bf2bcb8770bcdfefb7dee3f0be7696c55c9042fe14e08ba06e423e98bd46632a9d35d1762f31d236bf92bb12600915c0f502366614e5931f75c4493d07e6c487e81cd160089d27b4a5aedc05b12e0d33b69e4943f6c8d7470b891af5f944c7fb049fc8a6b03b2f8d9e16eaf1394a7006f3c64262815c00bf38a1648c828cd1e7e19eb2112519c3932d98dbe4881d3af5421bc532857d74310ac4aad59cccd4a3367ffab477edfce9679f6ad847b69f9432e3656cc86084967ec43fc1a846b5703e3cd479d901a72d1b809b80f057cafe897c28479b7926be0a66742f60f8e70f221888cbb2059f5e2e7a55a5e0f20a4240e79a38e069b4dd4df6f35b244916f67cf454d07dabb88c13b2598535f5e1c2aa24c0202d666c0f269e8ff5d9ede52e135a71a76cdc6f681447266d9693", 0x1000}, {&(0x7f0000001380)="e698dead80b66fc5da0a45033bcfdc5d541feca3ce05a248be0c3e4390011ef6086db3643cc634929f1c21b09fbc59615155d703bb60711eeec59c2f567a44125db8ba1429c4d05f62d0c43fbaa317cc96eceea7a2bd1743f53e8a92c5136af9b1f2cdc9f8978009c8345df0c6bfc36da766d21c8dcd469a24c123448ce67ab1f5297a48c66e8d627c1c04e2a4f6971334cf728c378c113bdfc60e0d7b5d668c89e3b691b1340a971a6cd908d6aabaa5ffd5498dba3ae7b6f41ea31b3197065f4f2cac02d2f4f462ccac3ae64cff1a2fbf8b9fd09a47cdd59282e0a9d5114f9835dc5d13b27d1f8475e820dd190cdff8ffd942ade258c5a0ae7067bf5e", 0xfd}, {&(0x7f0000001480)="42ea97b3642e2cff65dc7018623e0deb9df77a28da88abf42982e5e262d777eb0bbc07d470d6fcac9d9226a9af23c149c290de70442b7e127590db98466519e9a44f69b78e5ccfb45d8683e29381187ae3d4e7ece65f84621b7430ce557b981a03fd00d43ac132dc8d334671574dfb86ca12fb6bf0ad3d2fe5cee68cfdfa7661b7ea5c9bf4d5d8cfb419bb680c88ea197a9cda", 0x93}, {&(0x7f0000001540)="0da44c6d554e53aaea5e559751ce8df6c5b39f6c489ade623f053e9b09d0544462a373fff5f742cbedd66b325ac702ec45ab61c9ba70f0d4ce865a04a399febb5b94cda4f3f186e031fd942b53005531c69215", 0x53}], 0x4) 00:06:55 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:06:55 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r2, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400) socket$inet6(0xa, 0x80000, 0x61c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = dup2(r5, r0) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x8012, r0, 0xffffffffffffffff) [ 659.779779] binder: 12295:12298 unknown command 25358 [ 659.798758] binder: 12295:12298 ioctl c0306201 20008fd0 returned -22 [ 663.530847] IPVS: ftp: loaded support on port[0] = 21 [ 664.312256] IPVS: ftp: loaded support on port[0] = 21 [ 664.327448] chnl_net:caif_netlink_parms(): no params data found [ 664.388884] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.395829] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.402931] device bridge_slave_0 entered promiscuous mode [ 664.415633] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.422164] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.429565] device bridge_slave_1 entered promiscuous mode [ 664.429965] IPVS: ftp: loaded support on port[0] = 21 [ 664.461764] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 664.475697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 664.512241] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 664.519353] team0: Port device team_slave_0 added [ 664.535456] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 664.542570] team0: Port device team_slave_1 added [ 664.550176] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 664.560695] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 664.618794] chnl_net:caif_netlink_parms(): no params data found [ 664.626438] IPVS: ftp: loaded support on port[0] = 21 [ 664.682795] device hsr_slave_0 entered promiscuous mode [ 664.720531] device hsr_slave_1 entered promiscuous mode [ 664.786735] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 664.793811] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 664.881481] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.887994] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.895562] device bridge_slave_0 entered promiscuous mode [ 664.911305] chnl_net:caif_netlink_parms(): no params data found [ 664.919538] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.926205] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.936505] device bridge_slave_1 entered promiscuous mode [ 664.968104] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.974523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.981129] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.987456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.999570] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 665.039180] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 665.078983] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 665.087524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 665.096977] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 665.104189] team0: Port device team_slave_0 added [ 665.124277] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 665.131896] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 665.138984] team0: Port device team_slave_1 added [ 665.164336] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 665.176802] 8021q: adding VLAN 0 to HW filter on device team0 [ 665.183571] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 665.191055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 665.198083] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.209544] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.216756] device bridge_slave_0 entered promiscuous mode [ 665.228002] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 665.235563] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.247568] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.266916] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.273600] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.282229] device bridge_slave_1 entered promiscuous mode [ 665.382992] device hsr_slave_0 entered promiscuous mode [ 665.441225] device hsr_slave_1 entered promiscuous mode [ 665.490974] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 665.500674] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 665.507797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 665.515593] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.522011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 665.528921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 665.536832] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.543221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 665.566150] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 665.578015] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 665.586330] chnl_net:caif_netlink_parms(): no params data found [ 665.596009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 665.609012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 665.623564] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 665.655898] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 665.663322] team0: Port device team_slave_0 added [ 665.671113] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 665.678574] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 665.686833] team0: Port device team_slave_1 added [ 665.695072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 665.709025] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 665.717788] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 665.735357] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 665.743026] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 665.774803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 665.783122] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.791374] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 665.853121] device hsr_slave_0 entered promiscuous mode [ 665.890356] device hsr_slave_1 entered promiscuous mode [ 665.931003] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 665.946434] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.953067] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.961032] device bridge_slave_0 entered promiscuous mode [ 665.968472] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.974890] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.981913] device bridge_slave_1 entered promiscuous mode [ 665.988029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 666.000954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 666.029537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.037704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 666.052361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 666.070584] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 666.088480] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 666.098400] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 666.115448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 666.122929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.137955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.145784] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 666.154576] team0: Port device team_slave_0 added [ 666.161655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 666.169961] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 666.181023] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 666.187067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 666.198540] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 666.206100] team0: Port device team_slave_1 added [ 666.211548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 666.218989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 666.227936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 666.236864] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 666.257480] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 666.264488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 666.288315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.296463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.305946] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 666.352464] device hsr_slave_0 entered promiscuous mode [ 666.380512] device hsr_slave_1 entered promiscuous mode [ 666.425491] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 666.432044] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.440628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.462891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 666.475526] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 666.482094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.489123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 666.499099] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 666.516855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 666.523463] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 666.535136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.542890] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.550884] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.557240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.566801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 666.574362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.581500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.589199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.596824] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.603190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.616598] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 666.629894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 666.637253] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 666.646597] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 666.653038] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.661961] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 666.672473] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 666.679770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.695869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 666.708260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 666.721302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.729068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 666.737556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 666.745500] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.751987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.760211] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 666.767986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 666.778164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 666.789873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 666.797606] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 666.815669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 666.826435] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.837253] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.843725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.850852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 666.866499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 666.886203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 666.898502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 666.907441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 666.915758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 666.928415] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 666.939266] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 666.947277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 666.955249] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 666.963276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 666.977066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 666.987058] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 667.003481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.011731] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.019226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.027714] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.037437] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 667.052189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.059246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 667.066404] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.078050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.085912] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.093680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.101314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.110836] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 667.116872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.136032] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 667.152114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 667.164068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.174613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.184675] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 667.192846] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 667.198862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.207326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 667.214389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 667.223921] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 667.229998] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.242032] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 667.257663] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 667.265776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 667.274582] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 667.282253] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.288590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.296171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 667.305568] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 667.313462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 667.321965] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 667.329571] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.335970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.344700] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 667.353791] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 667.362937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.376289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 667.387104] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 667.398728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.433152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 667.448089] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 667.470749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 667.478462] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 667.494290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 667.503774] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 667.518060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 667.526815] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 667.537518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 667.555211] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 667.563689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 667.571777] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 667.579589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 667.587654] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 667.604037] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 667.610424] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 667.635020] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 667.658584] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.666759] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.706337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.745247] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.755369] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:03 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:03 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:03 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x8000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) socket(0x11, 0x4, 0x10001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x4000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r8, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0909000000000000000001000000000000008f4100000014001700000000000000000a7663616e300000"], 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80030000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x100, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x351d}]}, @TIPC_NLA_NET={0x50, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000001}, 0x24000870) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f00000000c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, r3}) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:03 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:03 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r2 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r3, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 667.828282] binder: 12354:12355 unknown command 25358 [ 667.835083] binder: 12354:12355 ioctl c0306201 20008fd0 returned -22 00:07:03 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:07:03 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:03 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:03 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000000c0)="6cbc529c3209a4b01792cec6e8ada093", 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xfc4c) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100000000000000044d8aab00a99ac300000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="10000600000000002000000000000000"], 0x34, 0x0) mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x800000, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@max_read={'max_read', 0x3d, 0x4672}}], [{@dont_hash='dont_hash'}, {@seclabel='seclabel'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@hash='hash'}]}}) r7 = dup2(r1, r1) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) [ 667.964444] binder: 12360:12361 unknown command 25358 [ 667.979736] binder: 12360:12361 ioctl c0306201 20008fd0 returned -22 00:07:03 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 668.451110] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.460071] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:04 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:04 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000000)={{0x0, 0x0, 0x20, 0x2, 0x10001}, 0x9, 0x4b12}) 00:07:04 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000)) r4 = dup2(r1, r1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="000000000000276031c431ee347082e4bc11508e20ee2ef7a0010076", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="00000000ffffffff0000000008000100736662002c00020028000100"/64], 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, r9}}, 0x24}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={@rand_addr="d32faa4a2867ce68378d787f98f5dfad", @mcast2, @mcast1, 0xff, 0x5c, 0x3, 0x400, 0xe3, 0x40000000, r9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r11, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r4, 0x400443c8, &(0x7f0000000280)={r10, 0x165}) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:04 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 668.562979] binder: 12378:12380 unknown command 25358 [ 668.568352] binder: 12378:12380 ioctl c0306201 20008fd0 returned -22 [ 668.625609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 668.646557] device bridge_slave_1 left promiscuous mode [ 668.652781] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.711068] device bridge_slave_0 left promiscuous mode [ 668.716622] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.771459] device bridge_slave_1 left promiscuous mode [ 668.780741] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.831016] device bridge_slave_0 left promiscuous mode [ 668.836537] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.881606] device bridge_slave_1 left promiscuous mode [ 668.887197] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.931150] device bridge_slave_0 left promiscuous mode [ 668.936882] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.991111] device bridge_slave_1 left promiscuous mode [ 668.996596] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.030800] device bridge_slave_0 left promiscuous mode [ 669.036352] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.211659] device hsr_slave_1 left promiscuous mode [ 669.252840] device hsr_slave_0 left promiscuous mode [ 669.303427] team0 (unregistering): Port device team_slave_1 removed [ 669.314480] team0 (unregistering): Port device team_slave_0 removed [ 669.324168] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 669.366760] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 669.455043] bond0 (unregistering): Released all slaves [ 669.541873] device hsr_slave_1 left promiscuous mode [ 669.615358] device hsr_slave_0 left promiscuous mode [ 669.684003] team0 (unregistering): Port device team_slave_1 removed [ 669.695646] team0 (unregistering): Port device team_slave_0 removed [ 669.705126] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 669.745508] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 669.824252] bond0 (unregistering): Released all slaves [ 669.912847] device hsr_slave_1 left promiscuous mode [ 669.952661] device hsr_slave_0 left promiscuous mode [ 669.984858] team0 (unregistering): Port device team_slave_1 removed [ 669.994646] team0 (unregistering): Port device team_slave_0 removed [ 670.004319] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 670.053392] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 670.125868] bond0 (unregistering): Released all slaves [ 670.202427] device hsr_slave_1 left promiscuous mode [ 670.245677] device hsr_slave_0 left promiscuous mode [ 670.293166] team0 (unregistering): Port device team_slave_1 removed [ 670.304122] team0 (unregistering): Port device team_slave_0 removed [ 670.313586] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 670.343745] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 670.423760] bond0 (unregistering): Released all slaves [ 670.483997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.509650] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.521419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 670.529973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 674.540913] IPVS: ftp: loaded support on port[0] = 21 [ 675.357151] IPVS: ftp: loaded support on port[0] = 21 [ 675.436683] chnl_net:caif_netlink_parms(): no params data found [ 675.475730] IPVS: ftp: loaded support on port[0] = 21 [ 675.530617] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.537161] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.544285] device bridge_slave_0 entered promiscuous mode [ 675.553488] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.559951] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.566952] device bridge_slave_1 entered promiscuous mode [ 675.608834] chnl_net:caif_netlink_parms(): no params data found [ 675.648839] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 675.673757] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 675.689888] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.696713] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.703945] device bridge_slave_0 entered promiscuous mode [ 675.710817] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.717154] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.725018] device bridge_slave_1 entered promiscuous mode [ 675.755963] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 675.764091] team0: Port device team_slave_0 added [ 675.782715] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 675.794307] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 675.802691] team0: Port device team_slave_1 added [ 675.837893] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 675.846925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 675.883147] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 675.916335] chnl_net:caif_netlink_parms(): no params data found [ 675.926583] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 675.934438] team0: Port device team_slave_0 added [ 675.983040] device hsr_slave_0 entered promiscuous mode [ 676.020503] device hsr_slave_1 entered promiscuous mode [ 676.064129] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 676.071603] team0: Port device team_slave_1 added [ 676.082155] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 676.096206] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 676.103601] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 676.111096] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 676.202338] device hsr_slave_0 entered promiscuous mode [ 676.240574] device hsr_slave_1 entered promiscuous mode [ 676.304430] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.310838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.317504] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.323907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.346436] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 676.353802] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 676.360913] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.367341] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.374827] device bridge_slave_0 entered promiscuous mode [ 676.387342] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.395276] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.402556] device bridge_slave_1 entered promiscuous mode [ 676.427077] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 676.439744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 676.465786] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 676.473128] team0: Port device team_slave_0 added [ 676.481658] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 676.488748] team0: Port device team_slave_1 added [ 676.500465] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.507535] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.517883] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 676.526268] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 676.537624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 676.604058] device hsr_slave_0 entered promiscuous mode [ 676.640702] device hsr_slave_1 entered promiscuous mode [ 676.689367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.703092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 676.716237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 676.728336] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 676.737828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 676.751732] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 676.758882] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 676.766517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.775857] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.784242] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 676.797611] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 676.804819] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 676.811305] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.818742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 676.825663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 676.842356] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 676.848454] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.858864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 676.866996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 676.880509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 676.888376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.899692] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.906105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.913660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 676.921483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 676.928987] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.935375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 676.948135] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 676.961293] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 676.968285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 676.975668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 676.983510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 676.991405] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.997743] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.005180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.018701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.026169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 677.042031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.049743] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.057930] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.064341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.073587] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 677.082701] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 677.091108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.107965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 677.116258] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 677.124151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.133279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.141157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.149124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.157664] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 677.168293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 677.175485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 677.185181] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 677.191910] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.199359] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 677.207705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 677.218134] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.227046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.236454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.249472] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 677.259448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 677.267594] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 677.275339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.286508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.294920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.302623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.309953] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 677.317853] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 677.325502] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.331980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.339048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.346826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 677.356913] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 677.368811] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 677.380930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.388428] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.395983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 677.404598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 677.412613] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.418988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 677.427362] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 677.436546] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 677.443091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.452179] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 677.465166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.473510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.481861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 677.492005] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 677.499334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.507466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.529282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 677.536373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.545505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.556013] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 677.563583] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 677.572948] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 677.578992] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.586123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 677.601232] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 677.610602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 677.618449] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 677.626171] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 677.636002] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 677.645971] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 677.653762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 677.662525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 677.670405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 677.677890] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 677.690839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.699255] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 677.708267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 677.716847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 677.725836] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 677.738742] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 677.746072] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 677.757470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 677.770424] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 677.783497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.359505] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.367594] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:14 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:14 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="2f2360476553c6bfc3d69bb5b366ee573fcd78dd8fbd2c649a4a112c2cd1a82c35bc3c35fe2934af65f09020fa17485947562adfe72d35854fba66eea445f798ce024861e65714d10e970aa25116b987bb076e52a6a2794273d879c3d40ff7c62cf70c4abf3ce9c1421054b4bee9c1be6ffd66b31f14c9651d593723e8a1072e28f7e3dd802665849efe663ffcea430d7afe7f44f50f97c7f8eb3934da385a32cf281348e3d9e589e81738d8a898188b5f83c9cc689e2944aeda13d1532fe7ba9e3d680b4e9b0ade42a41c4297", 0xcd) 00:07:14 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:14 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:07:14 executing program 1: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:07:14 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/M%v\x80\x80\x1f;mon#\x00', 0x9, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r4, 0x1, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x14, r6, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x841100}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9c3}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1e5bc06c43186a0c}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3a}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xcc6b6105fd3fc997}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @remote}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40082}, 0x40000) 00:07:14 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:14 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:07:14 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x222a82) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="140022069aada0b9bead726c46b5870000570732c960ee9e8b18248e1f728a285e9641e3bbdb625c85d2a675fa9dea817319cdb1a6e5fbf3318d1f1bfb5699726bfac2a919998fe54a1026b48bff2c48c306ca5ea016d8fae3641810f6708fb5a7b9e0773f9297ad63050ce26ad8d318eff4141e4a8430c10b360e5d45c7", @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r2, 0x0) 00:07:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01edff0065972300000000000300000002b79a379a739ba8518468b90261e0a443f5847bee5eaf36e2e3f61d6e4b9512b1bd411b59581fb3a1808a3dc9b35bcf46f5ea8c32905cb18f2080a3588586309aa3b5a551026e0612662b9604513f27adafb987818ef54f98b6d0605cc95f9368e05e2e53d102ca4debd9d421c02412c5855c5f0aec40027ac5fcb5a6b22d26f4635c0f992da4fa85db0f9df1f58dad629768a75948c633a0be559b287efe35ff7afa6359d8642b2e076575c794b7407f02695fda0b5eef024b47b3"], 0x14}}, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000540)="d90011f83841bc33ac878ffadb1335e4c9bff63821cd37682a2ab03628c4b773fc5712790d260aa38b13278b44674abd1f31a63bff1c4acbd54ac5bbc96d315bfc957a9b36bda5b96d74276e4d3c94", 0x4f}, {&(0x7f00000005c0)="53ca8bc3ca8f93e5d2bcd99a464e0b94acca6399332088641111b594256c85d60a9fe7cb402ffd3d8dde2eb5dc2ae166134e2224eb7528ea95fd358f54cc2177a1ac70c1d8b4bc45b7b848bc014c21d4f5dde2f1c54cfce0590983adeca652a3c3d854ed1a61bb7962a68012130022a40bd9c5ecebd41ee91520e6b59696d4d3ae5b112a2be7166257e3ac28f08401a269e6c09dbe03632ed4cee0764c178baaf82675fc2b6659ce8816d8e2a7ef1e99016206b7cb0f4d671449", 0xba}], 0x2) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$CAPI_INSTALLED(r6, 0x80024322) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") recvmsg$kcm(r5, &(0x7f00000004c0)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/143, 0x8f}, {&(0x7f0000000080)=""/18, 0x12}, {&(0x7f0000000200)=""/131, 0x83}, {&(0x7f00000002c0)=""/147, 0x93}, {&(0x7f0000000380)=""/134, 0x86}], 0x5, &(0x7f00000000c0)=""/16, 0x10}, 0x18001) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup2(r7, r7) ioctl(r8, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r8, 0x800443d2, &(0x7f0000000800)={0x3, &(0x7f00000007c0)=[{}, {}, {}]}) r9 = dup2(r3, r3) ioctl(r9, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r2, 0x0) 00:07:14 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 679.156401] device bridge_slave_1 left promiscuous mode [ 679.162329] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.216599] device bridge_slave_0 left promiscuous mode [ 679.236197] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.297168] device bridge_slave_1 left promiscuous mode [ 679.316558] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.370680] device bridge_slave_0 left promiscuous mode [ 679.376143] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.431299] device bridge_slave_1 left promiscuous mode [ 679.436772] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.511000] device bridge_slave_0 left promiscuous mode [ 679.516520] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.552932] device bridge_slave_1 left promiscuous mode [ 679.558400] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.610902] device bridge_slave_0 left promiscuous mode [ 679.616379] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.671638] device bridge_slave_1 left promiscuous mode [ 679.677110] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.720782] device bridge_slave_0 left promiscuous mode [ 679.726452] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.934977] device hsr_slave_1 left promiscuous mode [ 679.975047] device hsr_slave_0 left promiscuous mode [ 680.022843] team0 (unregistering): Port device team_slave_1 removed [ 680.033082] team0 (unregistering): Port device team_slave_0 removed [ 680.042306] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 680.074987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 680.142153] bond0 (unregistering): Released all slaves [ 680.262676] device hsr_slave_1 left promiscuous mode [ 680.304339] device hsr_slave_0 left promiscuous mode [ 680.342866] team0 (unregistering): Port device team_slave_1 removed [ 680.353044] team0 (unregistering): Port device team_slave_0 removed [ 680.368095] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 680.395383] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 680.495662] bond0 (unregistering): Released all slaves [ 680.572576] device hsr_slave_1 left promiscuous mode [ 680.612694] device hsr_slave_0 left promiscuous mode [ 680.652888] team0 (unregistering): Port device team_slave_1 removed [ 680.666175] team0 (unregistering): Port device team_slave_0 removed [ 680.675991] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 680.725089] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 680.792392] bond0 (unregistering): Released all slaves [ 680.912854] device hsr_slave_1 left promiscuous mode [ 680.954048] device hsr_slave_0 left promiscuous mode [ 680.994231] team0 (unregistering): Port device team_slave_1 removed [ 681.003736] team0 (unregistering): Port device team_slave_0 removed [ 681.013260] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 681.056410] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 681.122213] bond0 (unregistering): Released all slaves [ 681.211789] device hsr_slave_1 left promiscuous mode [ 681.263695] device hsr_slave_0 left promiscuous mode [ 681.305329] team0 (unregistering): Port device team_slave_1 removed [ 681.315118] team0 (unregistering): Port device team_slave_0 removed [ 681.324505] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 681.374865] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 681.445011] bond0 (unregistering): Released all slaves [ 686.161553] IPVS: ftp: loaded support on port[0] = 21 [ 687.213925] IPVS: ftp: loaded support on port[0] = 21 [ 687.291736] chnl_net:caif_netlink_parms(): no params data found [ 687.303536] IPVS: ftp: loaded support on port[0] = 21 [ 687.386148] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.392647] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.399486] device bridge_slave_0 entered promiscuous mode [ 687.416149] chnl_net:caif_netlink_parms(): no params data found [ 687.426509] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.433119] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.440255] device bridge_slave_1 entered promiscuous mode [ 687.468881] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 687.488750] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 687.515745] IPVS: ftp: loaded support on port[0] = 21 [ 687.529667] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 687.537023] team0: Port device team_slave_0 added [ 687.544832] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 687.552078] team0: Port device team_slave_1 added [ 687.559804] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 687.573136] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 687.596718] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.603581] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.610820] device bridge_slave_0 entered promiscuous mode [ 687.617573] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.624239] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.631516] device bridge_slave_1 entered promiscuous mode [ 687.683371] device hsr_slave_0 entered promiscuous mode [ 687.721471] device hsr_slave_1 entered promiscuous mode [ 687.788818] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 687.796993] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 687.811361] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 687.828919] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 687.855735] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 687.863825] team0: Port device team_slave_0 added [ 687.870770] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 687.877821] team0: Port device team_slave_1 added [ 687.902837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 687.927583] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 687.945460] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.951977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.958693] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.965118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.021133] chnl_net:caif_netlink_parms(): no params data found [ 688.083842] device hsr_slave_0 entered promiscuous mode [ 688.120298] device hsr_slave_1 entered promiscuous mode [ 688.171161] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 688.207311] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 688.225446] chnl_net:caif_netlink_parms(): no params data found [ 688.260244] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.266619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.274039] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.280411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.326645] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.334007] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.341286] device bridge_slave_0 entered promiscuous mode [ 688.347994] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.354987] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.362432] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.369065] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.388708] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.395942] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.403289] device bridge_slave_1 entered promiscuous mode [ 688.421989] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 688.429599] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.436149] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.443282] device bridge_slave_0 entered promiscuous mode [ 688.454035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 688.461443] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 688.473640] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.480253] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.487098] device bridge_slave_1 entered promiscuous mode [ 688.522689] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 688.532182] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 688.540210] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 688.547278] team0: Port device team_slave_0 added [ 688.556508] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 688.565019] team0: Port device team_slave_1 added [ 688.571925] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 688.580450] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 688.586610] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.594166] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 688.602373] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 688.616421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 688.623611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 688.642682] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 688.653496] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 688.660810] team0: Port device team_slave_0 added [ 688.673003] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 688.723161] device hsr_slave_0 entered promiscuous mode [ 688.773728] device hsr_slave_1 entered promiscuous mode [ 688.830588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 688.837695] team0: Port device team_slave_1 added [ 688.844321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 688.852175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 688.859719] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.866090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.878803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 688.889301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 688.898029] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 688.910953] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 688.918800] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 688.939517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 688.947426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 688.955904] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.962351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.971873] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 688.985859] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 689.003664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.015080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 689.063794] device hsr_slave_0 entered promiscuous mode [ 689.100485] device hsr_slave_1 entered promiscuous mode [ 689.140863] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 689.148384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.158662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.167312] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 689.175246] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 689.184954] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 689.195239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.203198] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.211105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.218749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.226357] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.234724] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 689.243454] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 689.252108] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 689.266840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.274132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.281185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.288579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.299474] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 689.305878] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.313534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 689.322615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.333977] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.355481] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 689.366098] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 689.378453] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 689.389321] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 689.399621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.410402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.418121] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.428121] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.434511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.442415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.450580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.458097] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.464490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.477710] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 689.494631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.511802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.519092] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 689.533321] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 689.544806] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 689.553331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 689.561851] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 689.569923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 689.596721] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 689.609893] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 689.618294] binder: 12478:12479 unknown command 25358 [ 689.624235] binder: 12478:12479 ioctl c0306201 20008fd0 returned -22 [ 689.625029] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 689.639732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.646782] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.654067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 689.662138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 689.669890] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.676478] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.696526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.707382] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 689.723976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 689.734474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 689.742905] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 689.750994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 689.758422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 689.768232] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 689.775195] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.787102] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 689.793341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 689.806829] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 689.822178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 689.830499] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 689.837279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 689.846259] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 689.854138] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.860528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.867503] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 689.875503] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 689.884361] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 689.892662] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 689.899479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 689.906627] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 689.914617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 689.922999] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.929333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.942875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.951377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 689.961785] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 689.967882] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.977104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 689.993972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 690.006426] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.026213] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 690.036519] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 690.044217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 690.053270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.061347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 690.069039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 690.076877] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.083263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.092757] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 690.106537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 690.114533] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 690.121775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 690.130683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 690.138708] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.147486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 690.156023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 690.163923] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.170311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.179815] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 690.188837] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 690.204382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.213759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.221525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 690.231347] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 690.239381] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 690.251612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.259407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.270988] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 690.286619] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 690.293268] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.302304] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.310718] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.337704] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 690.353760] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 690.364887] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 690.374727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.382683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 690.394678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.413205] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 690.423964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 690.432944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.443439] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 690.454649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 690.462546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.486206] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 690.493798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 690.502615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.518470] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 690.524848] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.540262] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 690.551494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.617750] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.625829] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.710856] device bridge_slave_1 left promiscuous mode [ 690.716456] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.748492] binder: 12508:12509 ioctl c0306201 0 returned -14 [ 690.755655] device bridge_slave_0 left promiscuous mode [ 690.761981] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.811873] device bridge_slave_1 left promiscuous mode [ 690.817388] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.870923] device bridge_slave_0 left promiscuous mode [ 690.876448] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.921228] device bridge_slave_1 left promiscuous mode [ 690.926713] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.971274] device bridge_slave_0 left promiscuous mode [ 690.976877] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.139109] device hsr_slave_1 left promiscuous mode [ 691.184228] device hsr_slave_0 left promiscuous mode [ 691.253138] team0 (unregistering): Port device team_slave_1 removed [ 691.264371] team0 (unregistering): Port device team_slave_0 removed [ 691.273859] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 691.303732] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 691.364211] bond0 (unregistering): Released all slaves [ 691.462552] device hsr_slave_1 left promiscuous mode [ 691.504436] device hsr_slave_0 left promiscuous mode [ 691.544280] team0 (unregistering): Port device team_slave_1 removed [ 691.553867] team0 (unregistering): Port device team_slave_0 removed [ 691.563429] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 691.595987] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 691.653642] bond0 (unregistering): Released all slaves [ 691.731909] device hsr_slave_1 left promiscuous mode [ 691.772746] device hsr_slave_0 left promiscuous mode [ 691.832996] team0 (unregistering): Port device team_slave_1 removed [ 691.843505] team0 (unregistering): Port device team_slave_0 removed [ 691.852706] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 691.883705] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 691.952903] bond0 (unregistering): Released all slaves 00:07:27 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x4, 0x38a00) ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000140)={0x5, &(0x7f0000000080)="13ce5d9953dcbb70b49ebe9a1161567f411c6965ac3c394b94a905d78c728af1bab02485e7d42b7bbf3d6f69ebf23d6ea6040ba937f8c39a08f192d44169fbd03ac8b035351f51e6c0a40720bc0b93a87180740ec957b75606edf38b4ba8a6b712cee38bc7392487c35b13a5317e5a94cf29fe592fc4c6"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010000004a000008000002000000"], 0x14}}, 0x0) r5 = dup2(r2, r1) ioctl(r5, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x101) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:27 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:27 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:27 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:07:27 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:27 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 692.016408] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.023155] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:27 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x4, 0x5, 0x0, 0x2, 0xf8, 0x7, 0x1}) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:27 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:28 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:28 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x101000, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") 00:07:28 executing program 3: syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0xfffffffffffffffd, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5, 0x400}, &(0x7f0000000040)=0x8) ptrace$cont(0x7, r0, 0x0, 0x0) tkill(r0, 0x41) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup2(r6, r6) ioctl(r7, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a87000/0x3000)=nil, 0x3000, 0x0, 0x40010, r6, 0x2) 00:07:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00 \f\a\x90\xd9P', 0x0, 0x14001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x4, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000b30000/0x3000)=nil, 0x3000, 0x1000002, 0x810, r0, 0x0) 00:07:28 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200c0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000140)=""/182, 0xb6, 0x8543, &(0x7f0000000200)={r4, r5+30000000}) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 695.521405] IPVS: ftp: loaded support on port[0] = 21 [ 696.275120] IPVS: ftp: loaded support on port[0] = 21 [ 696.349762] chnl_net:caif_netlink_parms(): no params data found [ 696.399219] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.406277] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.413668] device bridge_slave_0 entered promiscuous mode [ 696.420894] IPVS: ftp: loaded support on port[0] = 21 [ 696.420935] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.432482] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.439396] device bridge_slave_1 entered promiscuous mode [ 696.474807] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 696.519797] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 696.559441] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 696.567898] team0: Port device team_slave_0 added [ 696.572997] chnl_net:caif_netlink_parms(): no params data found [ 696.589722] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 696.597000] team0: Port device team_slave_1 added [ 696.604833] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 696.620125] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 696.631800] IPVS: ftp: loaded support on port[0] = 21 [ 696.682686] device hsr_slave_0 entered promiscuous mode [ 696.720343] device hsr_slave_1 entered promiscuous mode [ 696.760668] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 696.777623] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 696.834815] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.842878] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.849705] device bridge_slave_0 entered promiscuous mode [ 696.893539] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.899978] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.906964] device bridge_slave_1 entered promiscuous mode [ 696.914597] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.921028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.927731] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.934244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.946392] IPVS: ftp: loaded support on port[0] = 21 [ 696.977812] chnl_net:caif_netlink_parms(): no params data found [ 696.996537] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.017509] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 697.023880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.034739] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 697.058938] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 697.094272] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 697.101846] team0: Port device team_slave_0 added [ 697.166723] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.174152] team0: Port device team_slave_1 added [ 697.181975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 697.189215] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 697.211376] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.217751] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.224990] device bridge_slave_0 entered promiscuous mode [ 697.234128] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.240576] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.247515] device bridge_slave_1 entered promiscuous mode [ 697.259888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.267595] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.274460] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.322497] device hsr_slave_0 entered promiscuous mode [ 697.360463] device hsr_slave_1 entered promiscuous mode [ 697.400691] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 697.413559] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 697.419646] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.434687] chnl_net:caif_netlink_parms(): no params data found [ 697.445929] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 697.454270] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 697.466273] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.476214] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 697.501980] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 697.524189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.535323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.544533] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.550924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.560380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 697.567680] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 697.575740] team0: Port device team_slave_0 added [ 697.609257] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 697.617676] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.625914] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.633787] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.640192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.648435] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 697.656563] team0: Port device team_slave_1 added [ 697.665422] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 697.674222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 697.731652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.739936] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 697.762927] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.769310] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.778469] device bridge_slave_0 entered promiscuous mode [ 697.785443] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.791826] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.798849] device bridge_slave_1 entered promiscuous mode [ 697.826983] chnl_net:caif_netlink_parms(): no params data found [ 697.846325] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 697.869239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.888537] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 697.907173] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 697.915855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.923812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.931752] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 697.945597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.994061] device hsr_slave_0 entered promiscuous mode [ 698.040464] device hsr_slave_1 entered promiscuous mode [ 698.081025] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 698.096181] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 698.113363] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 698.120953] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 698.128263] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 698.156986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 698.165348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.175588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 698.184114] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 698.191477] team0: Port device team_slave_0 added [ 698.216807] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 698.224746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 698.232285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 698.239565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 698.246637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 698.265252] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 698.272427] team0: Port device team_slave_1 added [ 698.277932] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 698.285555] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 698.292862] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.299192] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.306391] device bridge_slave_0 entered promiscuous mode [ 698.315333] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 698.322944] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.336867] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.343629] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.351061] device bridge_slave_1 entered promiscuous mode [ 698.358301] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 698.367423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 698.432536] device hsr_slave_0 entered promiscuous mode [ 698.470391] device hsr_slave_1 entered promiscuous mode [ 698.551186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 698.558655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.566669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 698.574542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 698.582514] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.588848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.613177] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 698.622605] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 698.628628] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 698.643388] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 698.650642] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 698.657352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 698.665825] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 698.675112] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 698.684386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 698.696842] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 698.717123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 698.725175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 698.733329] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.739694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.749458] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 698.768303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 698.789108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.797852] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 698.805511] team0: Port device team_slave_0 added [ 698.812218] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 698.821095] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 698.828429] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 698.837428] team0: Port device team_slave_1 added [ 698.853946] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 698.865698] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 698.878444] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 698.891326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 698.898924] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 698.907637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 698.918865] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 698.931750] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 698.949376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 698.960477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.978505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 699.001315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.008880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.020884] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 699.029321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 699.041045] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 699.047087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 699.060009] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.068521] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.094338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 699.102017] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 699.134255] device hsr_slave_0 entered promiscuous mode [ 699.171507] device hsr_slave_1 entered promiscuous mode [ 699.210783] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready 00:07:35 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 699.227452] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 699.276587] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 699.289709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.302963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.315813] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 699.325287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 699.334210] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 699.342538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.351489] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 699.357571] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.366055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 699.375949] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 699.382055] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.393860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.400839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.407637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 699.414814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 699.433204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 699.446561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.455773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.468004] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.474515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.481758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 699.489472] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 699.496974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 699.508474] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 699.521375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 699.531114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 699.538746] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.545155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 699.552690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.561039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.568635] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.575010] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.582341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 699.604994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 699.606909] binder: 12573:12574 ioctl c0306201 0 returned -14 [ 699.631462] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 699.656511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 699.673760] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 699.689142] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.695562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.703175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.712758] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.721062] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.743024] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 699.755027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 699.769573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.777506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 699.787749] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 699.805601] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 699.815585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.824327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.832542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 699.840310] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.852435] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 699.862144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 699.869125] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.878929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.891078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 699.898749] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 699.915595] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 699.925486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 699.936820] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 699.945228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 699.952880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 699.962499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 699.970425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 699.977455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 699.985773] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 699.993637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.001519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.014682] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 700.024912] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 700.032052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 700.046916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.056860] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 700.065269] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 700.075892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 700.085967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.093758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.103553] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 700.109583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 700.118294] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 700.129937] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 700.137512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 700.144864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 700.154460] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 700.161175] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.174427] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 700.183504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 700.192311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 700.199880] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.206270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.214135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 700.224008] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 700.238910] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 700.249175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 700.257192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 700.264854] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.271226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.285444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.295749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.303889] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 700.312357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 700.329444] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 700.347568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 700.358936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 700.367125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 700.375075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 700.384134] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 700.402544] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 700.410975] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 700.418704] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 700.436404] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 700.444154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 700.456280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 700.470389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 700.478094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 700.486128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 700.510206] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 700.521646] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 700.551026] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 700.566893] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.605614] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.614907] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.647839] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.656867] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:37 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:37 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r3 = memfd_create(&(0x7f0000000200)='eth0\x00', 0x0) write(r3, &(0x7f0000000100)="ab", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xa4, 0x0, &(0x7f0000000000)=0xfffffffffffffd01) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r5) ioctl(r6, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:37 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:37 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:37 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) [ 701.222602] binder: 12601:12602 unknown command 25358 [ 701.228377] binder: 12601:12602 ioctl c0306201 20008fd0 returned -22 [ 701.242322] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.248833] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:37 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 701.280407] device bridge_slave_1 left promiscuous mode [ 701.285906] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.361362] device bridge_slave_0 left promiscuous mode [ 701.366910] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.380846] audit: type=1400 audit(1569024457.170:76): avc: denied { map } for pid=12604 comm="syz-executor.3" path=2F6D656D66643A65746830202864656C6574656429 dev="tmpfs" ino=62151 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 701.431479] device bridge_slave_1 left promiscuous mode [ 701.436985] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.490820] device bridge_slave_0 left promiscuous mode [ 701.506521] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.551506] device bridge_slave_1 left promiscuous mode [ 701.567207] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.611490] device bridge_slave_0 left promiscuous mode [ 701.616996] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.671498] device bridge_slave_1 left promiscuous mode [ 701.677634] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.730901] device bridge_slave_0 left promiscuous mode [ 701.737546] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.982821] device hsr_slave_1 left promiscuous mode [ 702.041926] device hsr_slave_0 left promiscuous mode [ 702.083411] team0 (unregistering): Port device team_slave_1 removed [ 702.094780] team0 (unregistering): Port device team_slave_0 removed [ 702.105687] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 702.145155] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 702.224077] bond0 (unregistering): Released all slaves [ 702.321968] device hsr_slave_1 left promiscuous mode [ 702.374038] device hsr_slave_0 left promiscuous mode [ 702.414516] team0 (unregistering): Port device team_slave_1 removed [ 702.424621] team0 (unregistering): Port device team_slave_0 removed [ 702.435430] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 702.475751] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 702.558506] bond0 (unregistering): Released all slaves [ 702.642401] device hsr_slave_1 left promiscuous mode [ 702.682734] device hsr_slave_0 left promiscuous mode [ 702.733663] team0 (unregistering): Port device team_slave_1 removed [ 702.746441] team0 (unregistering): Port device team_slave_0 removed [ 702.756001] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 702.804678] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 702.865251] bond0 (unregistering): Released all slaves [ 702.951834] device hsr_slave_1 left promiscuous mode [ 702.993003] device hsr_slave_0 left promiscuous mode [ 703.034410] team0 (unregistering): Port device team_slave_1 removed [ 703.045751] team0 (unregistering): Port device team_slave_0 removed [ 703.056125] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 703.093265] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 703.197655] bond0 (unregistering): Released all slaves 00:07:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, 0xffffffffffffffff, 0x0) 00:07:39 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:07:39 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000040)='syz0\x00') 00:07:39 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl(r2, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") accept4$llc(r2, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x80800) accept4$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x10, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) 00:07:39 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80), 0x400000000000368, 0x1a002, &(0x7f0000000180)={0x77359400}) getpid() openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_generic(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) [ 707.531340] IPVS: ftp: loaded support on port[0] = 21 [ 708.483665] IPVS: ftp: loaded support on port[0] = 21 [ 708.498645] chnl_net:caif_netlink_parms(): no params data found [ 708.534141] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.541056] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.548262] device bridge_slave_0 entered promiscuous mode [ 708.557720] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.564459] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.571677] device bridge_slave_1 entered promiscuous mode [ 708.588509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 708.597847] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 708.616587] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 708.624567] team0: Port device team_slave_0 added [ 708.629975] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 708.637222] team0: Port device team_slave_1 added [ 708.642455] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 708.649578] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 708.713615] device hsr_slave_0 entered promiscuous mode [ 708.780334] device hsr_slave_1 entered promiscuous mode [ 708.822701] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 708.839204] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 708.868144] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.874537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.881174] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.887509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.932127] IPVS: ftp: loaded support on port[0] = 21 [ 708.963117] chnl_net:caif_netlink_parms(): no params data found [ 709.016290] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.022819] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.029706] device bridge_slave_0 entered promiscuous mode [ 709.038425] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 709.045465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.054340] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 709.063029] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.069406] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.079897] device bridge_slave_1 entered promiscuous mode [ 709.104069] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 709.113416] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 709.144881] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 709.152077] team0: Port device team_slave_0 added [ 709.157026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 709.167828] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.174520] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.189113] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 709.196300] team0: Port device team_slave_1 added [ 709.203715] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 709.209786] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.219347] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 709.227431] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 709.255193] IPVS: ftp: loaded support on port[0] = 21 [ 709.274400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 709.282494] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.288858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.295877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 709.304264] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.310659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.362810] device hsr_slave_0 entered promiscuous mode [ 709.400452] device hsr_slave_1 entered promiscuous mode [ 709.440846] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 709.488567] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 709.499886] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 709.518005] chnl_net:caif_netlink_parms(): no params data found [ 709.529113] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 709.545231] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.553194] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.568182] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 709.584026] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.591335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.598915] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.633183] IPVS: ftp: loaded support on port[0] = 21 [ 709.639719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 709.664572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.676204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.687863] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 709.703978] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 709.710418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.717885] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.728289] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.735425] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.742419] device bridge_slave_0 entered promiscuous mode [ 709.749277] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.756045] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.763579] device bridge_slave_1 entered promiscuous mode [ 709.791997] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 709.798018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 709.828663] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 709.845076] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 709.867407] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 709.875655] team0: Port device team_slave_0 added [ 709.900448] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 709.915227] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 709.922662] team0: Port device team_slave_1 added [ 709.961819] chnl_net:caif_netlink_parms(): no params data found [ 709.975262] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 709.986615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.006614] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 710.023022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.094546] device hsr_slave_0 entered promiscuous mode [ 710.140647] device hsr_slave_1 entered promiscuous mode [ 710.177529] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 710.187816] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.196229] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.223201] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 710.241319] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 710.293902] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 710.308283] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 710.315434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 710.359270] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.371499] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.378718] device bridge_slave_0 entered promiscuous mode [ 710.393532] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 710.399621] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.439624] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 710.451332] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.458655] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.467422] device bridge_slave_1 entered promiscuous mode [ 710.476584] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 710.491477] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 710.509109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 710.517408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 710.525420] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.531843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.539198] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 710.547959] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 710.555634] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.561996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.588249] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 710.596143] chnl_net:caif_netlink_parms(): no params data found [ 710.606722] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 710.614294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 710.623370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 710.642425] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 710.675333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 710.697849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 710.712462] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 710.719521] team0: Port device team_slave_0 added [ 710.725308] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 710.732624] team0: Port device team_slave_1 added [ 710.756793] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 710.769348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.791901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 710.798962] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 710.807045] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.813781] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.820921] device bridge_slave_0 entered promiscuous mode [ 710.834074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 710.841813] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 710.849410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 710.873713] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.883000] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.890597] device bridge_slave_1 entered promiscuous mode [ 710.904854] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 710.952531] device hsr_slave_0 entered promiscuous mode [ 711.010580] device hsr_slave_1 entered promiscuous mode [ 711.060751] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 711.068167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 711.082509] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 711.091559] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 711.098624] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 711.115572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 711.123583] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.131863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 711.138650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 711.151732] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 711.162645] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 711.168719] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.185522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 711.197395] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 711.215991] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 711.223820] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 711.234133] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 711.245124] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 711.255635] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 711.263436] team0: Port device team_slave_0 added [ 711.268697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 711.279287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 711.287112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 711.295219] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 711.302812] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.309134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.316486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 711.325889] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 711.333204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 711.340635] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 711.347690] team0: Port device team_slave_1 added [ 711.358597] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 711.370918] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 711.378724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 711.387698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 711.395443] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.401829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.412016] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 711.419306] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 711.448326] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 711.455685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 711.463813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 711.475495] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 711.513291] device hsr_slave_0 entered promiscuous mode [ 711.564351] device hsr_slave_1 entered promiscuous mode [ 711.601466] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 711.608696] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 711.620854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 711.641007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 711.657580] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 711.666234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 711.675000] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 711.682807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 711.692615] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 711.713503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 711.729870] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.739447] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 711.750555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.761100] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 711.768623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 711.781384] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 711.798400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 711.806780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 711.826195] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 711.833411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 711.841552] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 711.859819] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 711.868507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 711.875988] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 711.885353] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 711.892394] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.900289] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 711.914968] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 711.924100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.931888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 711.939784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 711.948325] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.954724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.965309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 711.988449] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 712.001315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.020331] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 712.026525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 712.043423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 712.055225] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.061612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.073973] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.087569] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.121131] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 712.130175] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 712.138696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 712.145890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 712.153657] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 712.165615] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 712.172176] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.179840] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 712.193919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 712.206538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 712.222038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 712.228927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 712.237236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 712.244880] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.251257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.258308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 712.266125] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 712.276079] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 712.287007] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 712.312674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 712.319822] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 712.328058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 712.336160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 712.344213] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.350629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 712.357698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 712.365550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 712.375409] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 712.388446] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.397336] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.418180] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 712.428175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 712.437189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 712.445223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 712.453639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 712.461382] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 712.470998] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 712.485480] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 712.493163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 712.501673] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 712.509354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 712.517844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 712.527584] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 712.537320] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 712.544011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 712.555500] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 712.562664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 712.571397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 712.581403] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 712.591427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 712.598871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 712.610327] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 712.621357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.635643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 712.656787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 712.664887] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 712.673357] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 712.679361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 712.718786] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 712.746300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.922753] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.931342] bridge0: port 1(bridge_slave_0) entered disabled state 00:07:48 executing program 5: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe, 0x4) sendto$inet6(r2, 0x0, 0xffffffffffffffd1, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x400000000004e22}, 0x1c) poll(&(0x7f0000000000)=[{r1, 0x959f5a526dc11ee7}, {r2}], 0x2, 0x80000001) sendto$inet6(r2, &(0x7f0000000780)="f80fbd5da1b3c0f09d3d94815745711bc76fe5db01b2fc2212e65d8952d0e6c6a78d9f733c0b2e6e682851541ccb5deb7457e151cc1b5b5f36b48923af79e3e31d74d21dc9276ec6f239daf8840b23b84d41ef4054d550e46cfccfc13cb3a98b0115acdeb9a444078b26402b41c98ab137b29323385056b60a526b3761a836df03793a0d70bc210cdffb72830619e25a176e9093cd2f7638c729ff1729c356aa239337240d338a81f3518edc86ef1b5c6cd42d1cb29af9759c30b7c23ffae4fecf251357f1393e3a0323f95bd74bbf0ef60ffaf5f145b6f799b8b78adeefd3fdd5e5c640aeef43a440e9ff23509a446d6fa8496d4d073d1b98352d9ad48c32cc08b80ddf39dd47ed07b16dc93e526db098de8a840c9c65cbdbae98c40da0ef48e76429d4a74a2b228bfba5ed2eaf754154621255f65595ffaa1ae75d0dbc34502d79c49efd77849986e5dc12189002f11145da3d56c1ce8cac370b43b3cee8e8065e18dbb19fcd57d51c44f54f94f17368586f53dbaf3be6e5aba47cccac708235c3d6f75e18d397fd167aee63522153e59d14fc28996fae0c2ee0a6c582146530547829808681f6f631ece598d63118a08a4550534ac8ad228c05182eb2fee2a304b6d27db943307578e78c68b2b3889abf3158ec7fd4603aa7a6b601769724e669c4a3dc74afaeba1ed37b00ec985b1553e3452de574312e12114412bbefa6b1ac9d613fe505421f835f8c3a17aa04f20be028c321f176", 0x218, 0x8000, 0x0, 0x0) close(r2) 00:07:48 executing program 2: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') 00:07:48 executing program 1: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) 00:07:48 executing program 4: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r4 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r4, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 713.016800] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 713.037376] binder: 12704:12705 unknown command 25358 [ 713.044867] binder: 12704:12705 ioctl c0306201 20008fd0 returned -22 [ 713.065260] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.071890] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.086200] kasan: CONFIG_KASAN_INLINE enabled [ 713.092411] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 713.099823] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 713.111000] Modules linked in: [ 713.114204] CPU: 0 PID: 12708 Comm: syz-executor.3 Not tainted 4.14.145 #0 [ 713.121211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 713.130564] task: ffff888081144680 task.stack: ffff88807f788000 [ 713.136630] RIP: 0010:tcp_sendmsg_locked+0x50e/0x3200 [ 713.141912] RSP: 0018:ffff88807f78faa8 EFLAGS: 00010206 [ 713.147274] RAX: 0000000000000012 RBX: 0000000000000000 RCX: ffffc9000b056000 [ 713.154540] RDX: 00000000000000c8 RSI: ffffffff85240e44 RDI: 0000000000000090 [ 713.161808] RBP: ffff88807f78fc40 R08: ffff888081144680 R09: 0000000000000001 [ 713.169080] R10: 0000000000000000 R11: ffff888081144680 R12: dffffc0000000000 [ 713.176352] R13: ffff888085d69300 R14: ffff88807f78fd60 R15: ffff8880629c4e00 [ 713.183628] FS: 00007fea3933a700(0000) GS:ffff8880aee00000(0000) knlGS:0000000000000000 [ 713.191941] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 713.197826] CR2: 0000001b32126000 CR3: 000000005dd54000 CR4: 00000000001406f0 [ 713.205884] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 713.213157] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 713.220450] Call Trace: [ 713.223055] ? lock_sock_nested+0x9e/0x110 [ 713.227297] ? find_held_lock+0x35/0x130 [ 713.231363] ? tcp_sendpage+0x60/0x60 [ 713.235172] ? trace_hardirqs_on_caller+0x400/0x590 [ 713.240191] ? trace_hardirqs_on+0xd/0x10 [ 713.244343] tcp_sendmsg+0x30/0x50 [ 713.247880] inet_sendmsg+0x122/0x500 [ 713.251700] ? inet_recvmsg+0x500/0x500 [ 713.255677] sock_sendmsg+0xce/0x110 [ 713.259390] SYSC_sendto+0x206/0x310 [ 713.263102] ? SYSC_connect+0x2d0/0x2d0 00:07:49 executing program 0: mkdir(&(0x7f0000000200)='./file1\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x2, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e63"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper={0x400c630e}], 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0xfffffffffffffffa) rmdir(&(0x7f0000000080)='./file0\x00') r4 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) read(r5, &(0x7f0000000000)=""/19, 0xffffffad) socket$inet_udplite(0x2, 0x2, 0x88) setuid(0x0) rmdir(&(0x7f0000000140)='./file1\x00') [ 713.267080] ? kasan_check_read+0x11/0x20 [ 713.271242] ? _copy_to_user+0x87/0xd0 [ 713.275131] ? put_timespec64+0xb4/0x100 [ 713.279194] ? nsecs_to_jiffies+0x30/0x30 [ 713.283347] ? SyS_clock_gettime+0xf8/0x180 [ 713.287690] SyS_sendto+0x40/0x50 [ 713.291145] ? SyS_getpeername+0x30/0x30 [ 713.295206] do_syscall_64+0x1e8/0x640 [ 713.299096] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 713.304142] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 713.309333] RIP: 0033:0x459a09 [ 713.312517] RSP: 002b:00007fea39339c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 713.320223] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a09 [ 713.327494] RDX: 0000000000000218 RSI: 0000000020000780 RDI: 0000000000000005 [ 713.334886] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 713.342160] R10: 0000000000008000 R11: 0000000000000246 R12: 00007fea3933a6d4 [ 713.349439] R13: 00000000004c79b8 R14: 00000000004dd418 R15: 00000000ffffffff [ 713.356738] Code: d4 38 fc 4d 85 ed 0f 84 40 08 00 00 e8 ac d4 38 fc 8b 85 78 ff ff ff 48 8d bb 90 00 00 00 89 85 50 ff ff ff 48 89 f8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 74 06 0f 8e 4a 25 00 00 f6 83 90 00 00 00 [ 713.375923] RIP: tcp_sendmsg_locked+0x50e/0x3200 RSP: ffff88807f78faa8 [ 713.386736] ---[ end trace 8a35349f1895a652 ]--- [ 713.388918] kobject: 'erspan0' (ffff8880a4b82770): kobject_cleanup, parent (null) [ 713.391607] Kernel panic - not syncing: Fatal exception [ 713.393285] Kernel Offset: disabled [ 713.411096] Rebooting in 86400 seconds..