0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 923.793930] hfsplus: invalid session number or type of track [ 923.815741] hfsplus: unable to find HFS+ superblock [ 934.020405] device hsr_slave_1 left promiscuous mode [ 934.060010] device hsr_slave_0 left promiscuous mode [ 934.133787] team0 (unregistering): Port device team_slave_1 removed [ 934.145852] team0 (unregistering): Port device team_slave_0 removed [ 934.155412] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 934.189112] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 934.261077] bond0 (unregistering): Released all slaves [ 934.387733] device hsr_slave_1 left promiscuous mode [ 934.428215] device hsr_slave_0 left promiscuous mode [ 934.474200] team0 (unregistering): Port device team_slave_1 removed [ 934.486394] team0 (unregistering): Port device team_slave_0 removed [ 934.496338] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 934.520733] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 934.601405] bond0 (unregistering): Released all slaves 03:18:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:43 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x600, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:18:43 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 935.000678] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 935.033043] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 935.090752] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 935.111722] team0: Port device team_slave_0 added [ 935.226986] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 935.249948] team0: Port device team_slave_1 added [ 935.304161] hfsplus: invalid session number or type of track [ 935.324011] hfsplus: unable to find HFS+ superblock [ 935.371623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.400818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.488795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.549262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.595670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.678498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.703662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 935.721802] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 935.812640] device hsr_slave_0 entered promiscuous mode [ 935.855457] device hsr_slave_1 entered promiscuous mode [ 935.896170] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 935.903572] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 936.044212] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 936.092697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.103679] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 936.116491] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 936.122721] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.130906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.142154] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 936.149082] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.160109] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 936.167653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 936.176651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 936.184359] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.190810] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.201622] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 936.210029] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 936.218247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 936.236180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 936.243952] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.250401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 936.261530] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 936.269015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 936.282434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 936.292839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 936.308267] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 936.315381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 936.323405] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 936.335642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 936.346928] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 936.353878] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 936.362350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 936.376701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 936.384900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 936.398745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 936.413013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 936.423733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 936.438653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 936.452880] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 936.459817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 936.478894] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 936.488874] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 936.496176] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 936.502944] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 936.516194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.530813] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 936.540899] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 936.548639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 936.557081] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 936.613387] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 936.622107] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 936.634591] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 936.653653] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 936.661009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 936.674627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 936.685709] device veth0_vlan entered promiscuous mode [ 936.700200] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 936.708086] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 936.722605] device veth1_vlan entered promiscuous mode [ 936.732042] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 936.743204] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 936.756107] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 936.768861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 936.777267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 936.784643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 936.795487] device veth0_macvtap entered promiscuous mode [ 936.801980] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 936.812787] device veth1_macvtap entered promiscuous mode [ 936.824148] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 936.835982] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 936.846102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 936.857035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.866402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 936.876377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.885828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 936.897076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.906612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 936.916789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 936.927596] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 936.934683] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.942086] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 936.951203] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 936.960458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 936.980631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 936.991788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.001196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 937.011375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.020603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 937.030384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.039784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 937.049583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 937.059880] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 937.067106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 937.074260] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 937.082652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 937.296044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 937.302851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.311510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 937.318900] batman_adv: batadv0: Removing interface: batadv_slave_1 03:18:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x700, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:18:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 938.419420] hfsplus: invalid session number or type of track [ 938.446376] hfsplus: unable to find HFS+ superblock 03:18:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, 0x0}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x900, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:18:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 939.985531] hfsplus: invalid session number or type of track [ 939.997226] hfsplus: unable to find HFS+ superblock [ 941.094798] IPVS: ftp: loaded support on port[0] = 21 [ 941.365399] chnl_net:caif_netlink_parms(): no params data found [ 941.399564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.406508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.414811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.421638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.429796] device bridge_slave_1 left promiscuous mode [ 941.435384] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.476318] device bridge_slave_0 left promiscuous mode [ 941.481806] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.539552] device veth1_macvtap left promiscuous mode [ 941.544897] device veth0_macvtap left promiscuous mode [ 941.550366] device veth1_vlan left promiscuous mode [ 941.555736] device veth0_vlan left promiscuous mode [ 946.666953] device hsr_slave_1 left promiscuous mode [ 946.729832] device hsr_slave_0 left promiscuous mode [ 946.795199] team0 (unregistering): Port device team_slave_1 removed [ 946.807178] team0 (unregistering): Port device team_slave_0 removed [ 946.817365] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 946.840171] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 946.919617] bond0 (unregistering): Released all slaves [ 946.978013] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.984504] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.992314] device bridge_slave_0 entered promiscuous mode [ 947.000024] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.006494] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.013608] device bridge_slave_1 entered promiscuous mode [ 947.030917] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 947.033414] IPVS: ftp: loaded support on port[0] = 21 [ 947.040812] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 947.068227] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 947.076133] team0: Port device team_slave_0 added [ 947.083550] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 947.091179] team0: Port device team_slave_1 added [ 947.113590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.120543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.146521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.159645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.166127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.192174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.204855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 947.214456] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 947.278036] device hsr_slave_0 entered promiscuous mode [ 947.315494] device hsr_slave_1 entered promiscuous mode [ 947.371475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 947.379134] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 947.463619] chnl_net:caif_netlink_parms(): no params data found [ 947.542665] bridge0: port 1(bridge_slave_0) entered blocking state [ 947.549187] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.557014] device bridge_slave_0 entered promiscuous mode [ 947.564649] bridge0: port 2(bridge_slave_1) entered blocking state [ 947.571581] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.579540] device bridge_slave_1 entered promiscuous mode [ 947.603328] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 947.616200] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 947.626768] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 947.648644] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 947.656279] team0: Port device team_slave_0 added [ 947.662169] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 947.670200] team0: Port device team_slave_1 added [ 947.694117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.703650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.729592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.742965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.749742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 947.776522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.788273] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 947.799991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 947.918282] device hsr_slave_0 entered promiscuous mode [ 948.045687] device hsr_slave_1 entered promiscuous mode [ 948.086309] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 948.093907] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 948.121367] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 948.129675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.139833] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 948.163139] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 948.181172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 948.191928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 948.201558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 948.217425] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 948.217436] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.220540] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 948.223289] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 948.258780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 948.274758] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 948.282878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 948.291113] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.297555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.307935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 948.315860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 948.323590] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.330084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.337184] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.346403] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 948.356165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.363381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.377023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 948.384094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 948.393010] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 948.414582] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 948.422459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 948.430969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 948.439893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 948.455573] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 948.465235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 948.478377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 948.486323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 948.493891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 948.502624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 948.516496] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 948.522627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.556435] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 948.568878] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 948.582755] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 948.590350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 948.597855] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 948.610586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 948.642027] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 948.653941] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 948.663465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 948.672934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 948.726267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.751787] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 948.776300] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 948.783379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 948.791361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 948.804422] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 948.811196] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.821913] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 948.829711] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 948.837316] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 948.845474] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 948.856779] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 948.868084] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 948.876524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 948.884540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 948.893701] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.900308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.909526] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 948.917671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 948.925987] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.932371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.940143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 948.948948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 948.958665] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 948.969956] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 948.977697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 948.987303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 948.994866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 949.005260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 949.014972] device veth0_vlan entered promiscuous mode [ 949.021998] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 949.030628] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 949.038327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 949.047142] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 949.055589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 949.065538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 949.074459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 949.082866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 949.093804] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 949.104759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 949.113291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 949.121615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 949.129706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 949.138062] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 949.148473] device veth1_vlan entered promiscuous mode [ 949.394280] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 949.404564] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 949.413600] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 949.536282] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 949.545525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 949.553393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 949.561465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.568690] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.578439] device veth0_macvtap entered promiscuous mode [ 949.584650] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 949.594131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.727973] device veth1_macvtap entered promiscuous mode [ 949.734405] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 949.747923] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 949.759260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 949.771514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 949.782232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.791950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 949.802037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.811342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 949.821125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.831590] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 949.838866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.967975] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 949.976057] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 949.983329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 949.991462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 950.000651] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 950.012624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.022431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 950.032229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.041462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 950.051298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.061985] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 950.069101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.084183] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 950.092517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 950.104562] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 950.120112] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 950.129753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 950.138960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 950.472197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.479168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.489394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.496467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.843089] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 950.851146] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 950.858363] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready 03:18:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:18:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:18:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xa00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:18:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 951.006885] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 951.015495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 951.037202] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 951.069964] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 951.078384] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 951.087928] device veth0_vlan entered promiscuous mode [ 951.547549] hfsplus: invalid session number or type of track [ 951.553410] hfsplus: unable to find HFS+ superblock [ 951.648955] device veth1_vlan entered promiscuous mode 03:19:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xe00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 952.644056] hfsplus: invalid session number or type of track [ 952.668516] hfsplus: unable to find HFS+ superblock 03:19:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xebf, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 952.726225] device bridge_slave_1 left promiscuous mode [ 952.731881] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.776238] device bridge_slave_0 left promiscuous mode [ 952.784225] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.856142] device veth1_macvtap left promiscuous mode [ 952.882226] device veth0_macvtap left promiscuous mode [ 952.907059] device veth1_vlan left promiscuous mode [ 952.927603] device veth0_vlan left promiscuous mode [ 953.162062] hfsplus: invalid session number or type of track [ 953.185204] hfsplus: unable to find HFS+ superblock [ 958.179513] device hsr_slave_1 left promiscuous mode [ 958.229793] device hsr_slave_0 left promiscuous mode [ 958.284616] team0 (unregistering): Port device team_slave_1 removed [ 958.296680] team0 (unregistering): Port device team_slave_0 removed [ 958.309433] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 958.359157] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 958.440476] bond0 (unregistering): Released all slaves [ 958.492454] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 958.506061] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 958.513641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 958.521701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 958.536742] device veth0_macvtap entered promiscuous mode [ 958.543185] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 958.553607] device veth1_macvtap entered promiscuous mode [ 958.560224] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 958.572290] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 958.583302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 958.618049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 958.628046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.637406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 958.647397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.656752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 958.666881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.677972] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 958.685608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.692311] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 958.701133] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 958.709073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 958.717673] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 958.728797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.739636] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.753690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.764190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.777799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 958.789394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.803653] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 958.818794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.826501] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 958.839527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 959.054482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 959.061843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 959.071066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 959.077951] batman_adv: batadv0: Removing interface: batadv_slave_1 03:19:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1202, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:07 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:07 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:07 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 960.593112] hfsplus: invalid session number or type of track [ 960.623913] hfsplus: unable to find HFS+ superblock 03:19:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1f00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 961.740502] hfsplus: invalid session number or type of track [ 961.765596] hfsplus: unable to find HFS+ superblock 03:19:09 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 962.881910] IPVS: ftp: loaded support on port[0] = 21 [ 963.419266] chnl_net:caif_netlink_parms(): no params data found [ 963.659702] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.666275] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.673413] device bridge_slave_0 entered promiscuous mode [ 963.683567] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.690630] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.698495] device bridge_slave_1 entered promiscuous mode [ 963.718712] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 963.731788] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 963.752188] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 963.760027] team0: Port device team_slave_0 added [ 963.766589] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 963.774398] team0: Port device team_slave_1 added [ 963.800846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 963.807341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 963.832885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.053064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.059498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.084912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 964.100512] IPVS: ftp: loaded support on port[0] = 21 [ 964.315163] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 964.324608] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 964.596973] device hsr_slave_0 entered promiscuous mode [ 964.646514] device hsr_slave_1 entered promiscuous mode [ 964.686130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 964.903764] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 965.209344] device bridge_slave_1 left promiscuous mode [ 965.214825] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.236772] device bridge_slave_0 left promiscuous mode [ 965.242260] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.297610] device bridge_slave_1 left promiscuous mode [ 965.303063] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.356898] device bridge_slave_0 left promiscuous mode [ 965.362402] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.420746] device veth1_macvtap left promiscuous mode [ 965.426176] device veth0_macvtap left promiscuous mode [ 965.431495] device veth1_vlan left promiscuous mode [ 965.436714] device veth0_vlan left promiscuous mode [ 965.442093] device veth1_macvtap left promiscuous mode [ 965.447558] device veth0_macvtap left promiscuous mode [ 965.453102] device veth1_vlan left promiscuous mode [ 965.458493] device veth0_vlan left promiscuous mode [ 975.029224] device hsr_slave_1 left promiscuous mode [ 975.079837] device hsr_slave_0 left promiscuous mode [ 975.125327] team0 (unregistering): Port device team_slave_1 removed [ 975.134952] team0 (unregistering): Port device team_slave_0 removed [ 975.144561] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 975.188715] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 975.248612] bond0 (unregistering): Released all slaves [ 975.369607] device hsr_slave_1 left promiscuous mode [ 975.408256] device hsr_slave_0 left promiscuous mode [ 975.466834] team0 (unregistering): Port device team_slave_1 removed [ 975.477318] team0 (unregistering): Port device team_slave_0 removed [ 975.487055] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 975.521016] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 975.578080] bond0 (unregistering): Released all slaves [ 975.617880] chnl_net:caif_netlink_parms(): no params data found [ 975.662732] bridge0: port 1(bridge_slave_0) entered blocking state [ 975.669442] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.676722] device bridge_slave_0 entered promiscuous mode [ 975.684436] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 975.698467] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.706740] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.713754] device bridge_slave_1 entered promiscuous mode [ 975.732147] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 975.742802] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 975.764613] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 975.772094] team0: Port device team_slave_0 added [ 975.778440] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 975.786059] team0: Port device team_slave_1 added [ 975.803520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 975.809876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.835231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 975.932435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.938881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.964429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.977138] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 975.984878] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 976.037369] device hsr_slave_0 entered promiscuous mode [ 976.091394] device hsr_slave_1 entered promiscuous mode [ 976.146131] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 976.153587] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 976.184756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.208018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 976.243417] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 976.254903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 976.262780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 976.283255] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 976.289767] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.307940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 976.315651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 976.323602] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 976.332742] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.339177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.357059] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 976.372834] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 976.380257] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 976.393410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 976.401983] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 976.416690] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.423124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.437095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 976.460600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 976.502548] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 976.513087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 976.537694] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 976.551915] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 976.560511] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 976.581565] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 976.595060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.603515] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 976.616809] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 976.624813] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 976.637872] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 976.651747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 976.665840] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 976.674905] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 976.684814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 976.693384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 976.704292] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 976.719169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 976.728096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 976.742784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 976.750660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 976.764426] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 976.781518] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 976.787991] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.796971] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 976.803022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 976.820598] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 976.834362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 976.842752] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 976.851421] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.857890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.867422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 976.875545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 976.882834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 976.891056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 976.905693] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.912047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 976.923839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 976.932810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 976.942252] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 976.950347] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 976.963291] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 976.972901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 976.985272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 976.992084] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 977.011379] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 977.027089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.034594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 977.057959] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 977.071182] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 977.084260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 977.108863] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 977.119947] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 977.141041] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 977.154744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 977.164373] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 977.177234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 977.185686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 977.193399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 977.217779] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 977.223876] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 977.249972] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 977.271779] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 977.288385] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 977.301511] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 977.310463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 977.333390] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 977.348994] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 977.361527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 977.373180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.403947] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 977.414928] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 977.422162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 977.431356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 977.455347] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 977.470854] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 977.490986] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 977.502692] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 977.514815] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 977.531004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 977.546613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 977.553680] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 977.563555] device veth0_vlan entered promiscuous mode [ 977.587956] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 977.595473] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 977.602210] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 977.612267] device veth1_vlan entered promiscuous mode [ 977.619236] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 977.628955] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 977.639345] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 977.646191] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 977.653475] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 977.660799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 977.668463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 977.677333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 977.684400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 977.703240] device veth0_vlan entered promiscuous mode [ 977.718367] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 977.729021] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 977.737490] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 977.746188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 977.756732] device veth0_macvtap entered promiscuous mode [ 977.762909] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 977.770463] device veth1_vlan entered promiscuous mode [ 977.784069] device veth1_macvtap entered promiscuous mode [ 977.792895] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 977.803947] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 977.815754] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 977.828803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 977.838989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.848996] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 977.858794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.868498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 977.878501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.889015] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 977.896401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 977.905748] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 977.913111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 977.920704] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 977.929703] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 977.937855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 977.950083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 977.960073] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.969645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 977.979968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 977.989198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 977.999397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.010481] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 978.017860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.026934] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 978.034834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 978.044844] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 978.054727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 978.063514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 978.096537] device veth0_macvtap entered promiscuous mode [ 978.103061] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 978.119479] device veth1_macvtap entered promiscuous mode [ 978.126581] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 978.138143] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 978.148310] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 978.157981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 978.168075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.177656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 978.187903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.197462] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 978.208325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.217632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 978.227926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.245526] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 978.254200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.266035] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 978.280073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 978.290636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 978.302031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 978.316901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.324297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.341234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 978.348445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 978.797730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 978.808360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.819933] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 978.829814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.839088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 978.848951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.859746] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 978.866903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.875897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 978.883808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:19:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 979.866452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 979.873308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.884651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 979.891532] batman_adv: batadv0: Removing interface: batadv_slave_1 03:19:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2200, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:28 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:28 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:28 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:29 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2c00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:29 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:29 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:30 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:30 executing program 0: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:30 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3f00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 983.709559] IPVS: ftp: loaded support on port[0] = 21 [ 984.162855] chnl_net:caif_netlink_parms(): no params data found [ 984.301659] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.308468] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.316972] device bridge_slave_0 entered promiscuous mode [ 984.432033] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.438802] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.448382] device bridge_slave_1 entered promiscuous mode [ 984.465932] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 984.475718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 984.598602] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 984.607148] team0: Port device team_slave_0 added [ 984.612876] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 984.620522] team0: Port device team_slave_1 added [ 984.633264] device bridge_slave_1 left promiscuous mode [ 984.638976] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.686378] device bridge_slave_0 left promiscuous mode [ 984.691871] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.749255] device veth1_macvtap left promiscuous mode [ 984.762447] device veth0_macvtap left promiscuous mode [ 984.767866] device veth1_vlan left promiscuous mode [ 984.772930] device veth0_vlan left promiscuous mode [ 989.656847] device hsr_slave_1 left promiscuous mode [ 989.699321] device hsr_slave_0 left promiscuous mode [ 989.754127] team0 (unregistering): Port device team_slave_1 removed [ 989.765838] team0 (unregistering): Port device team_slave_0 removed [ 989.775866] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 989.808746] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 989.867858] bond0 (unregistering): Released all slaves [ 989.924865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.931320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.956720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.972248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.974694] IPVS: ftp: loaded support on port[0] = 21 [ 989.979555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.010367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.023213] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 990.035144] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 990.096978] device hsr_slave_0 entered promiscuous mode [ 990.135588] device hsr_slave_1 entered promiscuous mode [ 990.177891] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 990.226181] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 990.325513] chnl_net:caif_netlink_parms(): no params data found [ 990.401357] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.409122] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.422100] device bridge_slave_0 entered promiscuous mode [ 990.443496] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.450231] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.463155] device bridge_slave_1 entered promiscuous mode [ 990.492799] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 990.525746] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 990.554205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 990.580884] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 990.594842] team0: Port device team_slave_0 added [ 990.601647] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 990.614673] team0: Port device team_slave_1 added [ 990.639811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.652380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.683327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.701305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.707775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.738454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.751989] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 990.768492] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 990.783935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.808888] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 990.869246] device hsr_slave_0 entered promiscuous mode [ 990.910353] device hsr_slave_1 entered promiscuous mode [ 990.966133] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 990.973655] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 990.989084] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 991.003927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 991.013333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 991.035491] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 991.041675] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.062718] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 991.070386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 991.083748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 991.092203] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.098660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.111343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 991.123996] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 991.131809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 991.140681] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 991.149021] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.155435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.169813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 991.186161] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 991.204547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 991.220898] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 991.244907] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 991.254674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 991.269043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 991.280308] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 991.288189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 991.296718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 991.304878] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 991.318490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 991.330522] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 991.338488] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 991.347204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 991.354948] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 991.362982] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 991.375335] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 991.381446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 991.391718] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 991.421885] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 991.450151] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 991.465557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 991.472658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 991.492853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.501518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 991.514107] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 991.527892] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 991.535930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 991.543259] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 991.560458] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 991.570394] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 991.582270] 8021q: adding VLAN 0 to HW filter on device team0 [ 991.592994] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 991.608770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 991.621274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 991.633556] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 991.646317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 991.654656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 991.664966] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.671656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 991.679400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 991.690869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 991.698587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 991.712074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 991.720696] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.727164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.740340] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 991.747771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 991.760225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 991.987488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 991.999270] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 992.007344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 992.016994] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 992.027709] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 992.036442] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 992.043349] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 992.050036] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 992.172267] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 992.184234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 992.192817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 992.205938] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 992.214467] device veth0_vlan entered promiscuous mode [ 992.222456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 992.229999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 992.240416] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 992.362316] device veth1_vlan entered promiscuous mode [ 992.369018] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 992.375832] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 992.382838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 992.390042] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 992.397821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 992.406452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 992.417378] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 992.537319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 992.545236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 992.554902] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 992.566846] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 992.572970] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 992.599392] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 992.610063] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 992.617383] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 992.624932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 992.635553] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 992.761594] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 992.774026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.783458] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 992.790894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 992.800195] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 992.810916] device veth0_macvtap entered promiscuous mode [ 992.821660] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 992.952336] device veth1_macvtap entered promiscuous mode [ 992.959446] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 992.971909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 992.983220] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 992.993454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 993.003882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.013323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 993.023302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.032505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 993.042342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.052863] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 993.060146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 993.069964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 993.079878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.089652] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 993.099506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.108661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 993.118467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.129404] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 993.136503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.258245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 993.266510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 993.273741] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 993.281842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 993.290328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 993.298725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.309788] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 993.436118] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 993.443624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 993.457920] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 993.813019] device bridge_slave_1 left promiscuous mode [ 993.819191] bridge0: port 2(bridge_slave_1) entered disabled state [ 993.856255] device bridge_slave_0 left promiscuous mode [ 993.861949] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.910350] device veth1_macvtap left promiscuous mode [ 993.915850] device veth0_macvtap left promiscuous mode [ 993.921372] device veth1_vlan left promiscuous mode [ 993.927149] device veth0_vlan left promiscuous mode 03:19:42 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:42 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:42 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 999.867938] device hsr_slave_1 left promiscuous mode [ 999.920099] device hsr_slave_0 left promiscuous mode [ 999.966005] team0 (unregistering): Port device team_slave_1 removed [ 999.976563] team0 (unregistering): Port device team_slave_0 removed [ 999.986683] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1000.010335] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1000.090466] bond0 (unregistering): Released all slaves [ 1000.153138] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1000.160903] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1000.168132] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready 03:19:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1000.355596] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1000.363260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready 03:19:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4800, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1000.417605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1000.437370] device veth0_vlan entered promiscuous mode [ 1000.502106] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1000.510170] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1000.539354] device veth1_vlan entered promiscuous mode [ 1000.559933] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1000.618530] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1000.680460] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1000.716876] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1000.723832] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1000.738506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1000.762838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1000.787985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1000.820407] device veth0_macvtap entered promiscuous mode [ 1000.836761] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1000.867384] device veth1_macvtap entered promiscuous mode [ 1000.873917] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1000.922313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1000.955642] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1000.981223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.011550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.034925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.050986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.061706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.076992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.089668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1001.101891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.119829] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1001.141454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.161891] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1001.176699] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1001.199120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1001.224028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.251941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.282970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.308120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.324699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.342519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.355449] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.364732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1001.378782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.391292] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1001.403388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.415729] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1001.423742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1001.647502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1001.654335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1001.664154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1001.671974] batman_adv: batadv0: Removing interface: batadv_slave_1 03:19:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:50 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4c00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:51 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:19:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:51 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:19:52 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:19:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1005.354652] IPVS: ftp: loaded support on port[0] = 21 [ 1005.811388] chnl_net:caif_netlink_parms(): no params data found [ 1006.048898] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.055526] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.062661] device bridge_slave_0 entered promiscuous mode [ 1006.071197] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.077672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.084696] device bridge_slave_1 entered promiscuous mode [ 1006.312350] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1006.322486] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1006.338734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1006.347251] team0: Port device team_slave_0 added [ 1006.356768] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1006.364135] team0: Port device team_slave_1 added [ 1006.379095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1006.385598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.410970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1006.424797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1006.431251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1006.456984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1006.468349] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1006.477094] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1006.788147] device hsr_slave_0 entered promiscuous mode [ 1006.845575] device hsr_slave_1 entered promiscuous mode [ 1006.887509] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1006.897806] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1007.128963] IPVS: ftp: loaded support on port[0] = 21 [ 1007.647842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1007.898884] chnl_net:caif_netlink_parms(): no params data found [ 1007.942785] device bridge_slave_1 left promiscuous mode [ 1007.948522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.015817] device bridge_slave_0 left promiscuous mode [ 1008.021436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.078072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1008.084939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.093902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1008.100704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.108894] device bridge_slave_1 left promiscuous mode [ 1008.114370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.156141] device bridge_slave_0 left promiscuous mode [ 1008.161763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.220198] device veth1_macvtap left promiscuous mode [ 1008.225716] device veth0_macvtap left promiscuous mode [ 1008.231092] device veth1_vlan left promiscuous mode [ 1008.236605] device veth0_vlan left promiscuous mode [ 1008.241971] device veth1_macvtap left promiscuous mode [ 1008.247752] device veth0_macvtap left promiscuous mode [ 1008.253077] device veth1_vlan left promiscuous mode [ 1008.258455] device veth0_vlan left promiscuous mode [ 1018.487968] device hsr_slave_1 left promiscuous mode [ 1018.548349] device hsr_slave_0 left promiscuous mode [ 1018.594214] team0 (unregistering): Port device team_slave_1 removed [ 1018.606253] team0 (unregistering): Port device team_slave_0 removed [ 1018.616261] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1018.648597] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1018.727568] bond0 (unregistering): Released all slaves [ 1018.829423] device hsr_slave_1 left promiscuous mode [ 1018.880140] device hsr_slave_0 left promiscuous mode [ 1018.925877] team0 (unregistering): Port device team_slave_1 removed [ 1018.936157] team0 (unregistering): Port device team_slave_0 removed [ 1018.945975] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1018.980677] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1019.043289] bond0 (unregistering): Released all slaves [ 1019.110173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.116745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.123754] device bridge_slave_0 entered promiscuous mode [ 1019.131537] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.138042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.145189] device bridge_slave_1 entered promiscuous mode [ 1019.166566] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1019.179829] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1019.197372] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1019.204765] team0: Port device team_slave_0 added [ 1019.217961] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1019.226457] team0: Port device team_slave_1 added [ 1019.241516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.247899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.273271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.285971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.292255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.317659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.329217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1019.337382] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1019.407981] device hsr_slave_0 entered promiscuous mode [ 1019.455586] device hsr_slave_1 entered promiscuous mode [ 1019.500115] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1019.507592] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1019.546342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.560056] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1019.581618] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1019.592308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1019.599842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1019.610127] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1019.616550] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.707582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1019.715468] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1019.723617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1019.738057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.744455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.762541] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1019.777260] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1019.791337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1019.799352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1019.813173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1019.821531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.827946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.852370] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1019.867824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1019.887710] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1019.901621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1019.916965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1019.936399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1019.944954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1019.956216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1019.967273] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1019.982171] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1019.989566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.996880] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1020.004345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.012587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.021387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.034641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.043290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.059000] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1020.073244] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1020.081888] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.094411] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.106417] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1020.112542] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1020.128556] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1020.141153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1020.149571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1020.169745] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1020.181510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.192564] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1020.213615] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1020.227463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1020.242977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1020.251830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.258274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1020.278093] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1020.287969] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1020.300933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1020.309012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1020.321254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1020.329809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1020.346757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1020.355805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.362809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1020.376458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.386494] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1020.396287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1020.409851] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1020.417110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1020.438489] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1020.450658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1020.459859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1020.468457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1020.479060] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1020.487520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1020.496972] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1020.513758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1020.524856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1020.538557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1020.552904] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1020.561930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1020.571040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1020.589501] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1020.597930] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1020.624536] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1020.642474] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1020.654467] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1020.664524] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1020.671980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1020.680477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1020.689053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1020.696560] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1020.710653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.730100] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1020.741580] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1020.750016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1020.759124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1020.791259] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1020.801766] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1020.811000] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1020.829259] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1020.836278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1020.844220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1020.852565] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1020.860166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1020.873674] device veth0_vlan entered promiscuous mode [ 1020.886621] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1020.894040] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1020.901545] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1020.915478] device veth1_vlan entered promiscuous mode [ 1020.922413] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1020.936953] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1020.945569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1020.953086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1020.967753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1020.984180] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1020.993690] device veth0_vlan entered promiscuous mode [ 1021.004725] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1021.014889] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1021.027984] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1021.046226] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1021.058665] device veth1_vlan entered promiscuous mode [ 1021.064670] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1021.074839] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1021.085376] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1021.096341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1021.103672] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1021.111549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1021.119462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1021.139790] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1021.153797] device veth0_macvtap entered promiscuous mode [ 1021.161614] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1021.173717] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1021.186819] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1021.195644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1021.203587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1021.214489] device veth1_macvtap entered promiscuous mode [ 1021.223516] device veth0_macvtap entered promiscuous mode [ 1021.230902] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1021.243269] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1021.253917] device veth1_macvtap entered promiscuous mode [ 1021.261554] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1021.272833] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1021.283956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.295819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.305677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.315804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.324936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.335249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.346573] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1021.353769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.362423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1021.371439] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1021.380120] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1021.387792] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1021.396787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1021.407223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.417962] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.427150] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.436975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.446633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.456469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.466716] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1021.473769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.484011] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1021.500453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1021.508890] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1021.522766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.533478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.548303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.559375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.572684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.582779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.592447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1021.602322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.613037] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1021.620314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.635786] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1021.643835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1021.659385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.669481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.679163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.689955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.699374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.709389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.718745] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1021.728588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1021.739608] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1021.746789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.758136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1021.766666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1021.965525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1021.973469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1022.001523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1022.014024] batman_adv: batadv0: Removing interface: batadv_slave_1 03:20:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6800, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:10 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100), 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:11 executing program 0: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6c00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x7400, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1027.441083] IPVS: ftp: loaded support on port[0] = 21 [ 1027.643818] chnl_net:caif_netlink_parms(): no params data found [ 1027.780085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.786681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.793920] device bridge_slave_0 entered promiscuous mode [ 1027.802014] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.809142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.816875] device bridge_slave_1 entered promiscuous mode [ 1027.942417] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1027.952900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1027.971560] device bridge_slave_1 left promiscuous mode [ 1027.977344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.016117] device bridge_slave_0 left promiscuous mode [ 1028.021631] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.077816] device veth1_macvtap left promiscuous mode [ 1028.083409] device veth0_macvtap left promiscuous mode [ 1028.088924] device veth1_vlan left promiscuous mode [ 1028.094020] device veth0_vlan left promiscuous mode [ 1033.207096] device hsr_slave_1 left promiscuous mode [ 1033.248505] device hsr_slave_0 left promiscuous mode [ 1033.294092] team0 (unregistering): Port device team_slave_1 removed [ 1033.306124] team0 (unregistering): Port device team_slave_0 removed [ 1033.316568] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1033.349684] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1033.430442] bond0 (unregistering): Released all slaves [ 1033.498391] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1033.506503] team0: Port device team_slave_0 added [ 1033.512782] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1033.520503] team0: Port device team_slave_1 added [ 1033.539586] IPVS: ftp: loaded support on port[0] = 21 [ 1033.543234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1033.553799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.581946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.605726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.613958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.639584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.650679] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1033.669169] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1033.727245] device hsr_slave_0 entered promiscuous mode [ 1033.766175] device hsr_slave_1 entered promiscuous mode [ 1033.806224] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1033.865649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1033.993016] chnl_net:caif_netlink_parms(): no params data found [ 1034.083786] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1034.140652] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.150726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.161589] device bridge_slave_0 entered promiscuous mode [ 1034.189825] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.199569] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.210965] device bridge_slave_1 entered promiscuous mode [ 1034.261000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1034.275439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1034.285446] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1034.311391] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1034.318233] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1034.327449] team0: Port device team_slave_0 added [ 1034.342884] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1034.351642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1034.366597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1034.374106] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1034.388258] team0: Port device team_slave_1 added [ 1034.397185] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1034.403295] 8021q: adding VLAN 0 to HW filter on device team0 [ 1034.440716] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1034.454004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1034.464718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1034.477013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.483528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.498659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.504960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.531554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.543064] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1034.557398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.563667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1034.590645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.603499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1034.617039] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1034.624871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1034.639079] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1034.650324] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.656787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.667083] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1034.677085] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1034.685168] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1034.708692] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1034.717763] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1034.777537] device hsr_slave_0 entered promiscuous mode [ 1034.815382] device hsr_slave_1 entered promiscuous mode [ 1034.856237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1034.864875] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1034.875608] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1034.883159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1034.891954] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1034.900265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1034.908854] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1034.917727] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1034.925522] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1034.942518] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1034.961646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1034.971644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1034.996580] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1035.008027] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1035.015985] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.033275] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1035.039792] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.079088] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1035.107216] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1035.116187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1035.123010] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1035.140513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.150440] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1035.222247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.239910] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1035.258871] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1035.265377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1035.272580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1035.284192] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1035.291149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.301621] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1035.312547] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1035.321188] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1035.330449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1035.338354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.344829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.352014] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1035.360378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1035.368578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.374950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.382477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1035.392839] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1035.405283] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1035.412470] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1035.424659] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1035.434385] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1035.451972] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1035.463923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1035.478885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1035.495677] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1035.507006] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1035.513958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1035.524229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1035.532790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1035.541812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1035.560773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1035.571665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1035.582213] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1035.589675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1035.597634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1035.607328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1035.615823] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1035.639365] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1035.649381] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1035.656956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1035.663926] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1035.676018] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1035.683340] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1035.691360] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1035.702288] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1035.712762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1035.719316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1035.727796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1035.738469] device veth0_vlan entered promiscuous mode [ 1035.977696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1035.985486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.009659] device veth1_vlan entered promiscuous mode [ 1036.015969] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1036.024827] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1036.152892] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1036.167589] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1036.175550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1036.182920] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1036.190542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1036.198987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1036.329561] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1036.341921] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1036.353559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1036.362597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1036.374000] device veth0_macvtap entered promiscuous mode [ 1036.380893] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1036.515772] device veth1_macvtap entered promiscuous mode [ 1036.522117] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1036.536560] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1036.543973] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1036.551286] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1036.559297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1036.578840] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1036.588764] device veth0_vlan entered promiscuous mode [ 1036.596521] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1036.603944] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1036.611865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1036.619613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1036.631371] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1036.758530] device veth1_vlan entered promiscuous mode [ 1036.765177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1036.772350] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1036.782085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1036.792371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.802532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1036.812501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.821808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1036.831745] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.841163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1036.851119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.861616] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1036.868757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.886532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1036.898964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.908804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1036.918965] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.928926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1036.938758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.948252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1036.958205] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.970122] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1036.977711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.096023] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1037.103926] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1037.112220] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1037.120222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1037.139025] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1037.152124] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1037.161621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1037.170958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1037.299383] device veth0_macvtap entered promiscuous mode [ 1037.323171] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1037.334603] device veth1_macvtap entered promiscuous mode [ 1037.341603] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1037.613952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.621023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1037.629272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.636678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1037.784045] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1037.795422] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1037.810855] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 03:20:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x0, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x7a00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1038.017338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1038.037227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1038.047162] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.057093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1038.097486] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.108159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1038.118655] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.128335] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1038.139785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1038.151988] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1038.173254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1038.185601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.194665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.204834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.212781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.229379] device bridge_slave_1 left promiscuous mode [ 1038.237912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.286895] device bridge_slave_0 left promiscuous mode [ 1038.293784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.359978] device veth1_macvtap left promiscuous mode [ 1038.370207] device veth0_macvtap left promiscuous mode [ 1038.382909] device veth1_vlan left promiscuous mode [ 1038.395866] device veth0_vlan left promiscuous mode [ 1043.977174] device hsr_slave_1 left promiscuous mode [ 1044.028704] device hsr_slave_0 left promiscuous mode [ 1044.076410] team0 (unregistering): Port device team_slave_1 removed [ 1044.087424] team0 (unregistering): Port device team_slave_0 removed [ 1044.097690] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1044.121669] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1044.201454] bond0 (unregistering): Released all slaves 03:20:32 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1044.249189] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1044.257821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1044.270903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.281005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.290734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.301401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.311118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1044.327236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1044.338511] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1044.359649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.642935] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1044.658477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:20:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xbf0e, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xedc0, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x40000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1049.179468] IPVS: ftp: loaded support on port[0] = 21 [ 1049.491148] chnl_net:caif_netlink_parms(): no params data found [ 1049.734390] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.741048] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.749014] device bridge_slave_0 entered promiscuous mode [ 1049.973622] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.980271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.989905] device bridge_slave_1 entered promiscuous mode [ 1050.009475] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1050.018878] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1050.038031] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1050.046141] team0: Port device team_slave_0 added [ 1050.052286] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1050.060675] team0: Port device team_slave_1 added [ 1050.082200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1050.088688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.114380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1050.353933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.360393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1050.386100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.621991] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1050.631004] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1050.917575] device hsr_slave_0 entered promiscuous mode [ 1050.955595] device hsr_slave_1 entered promiscuous mode [ 1050.996065] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1050.999892] IPVS: ftp: loaded support on port[0] = 21 [ 1051.226002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1051.520808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.527718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.538561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.545395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.553155] device bridge_slave_1 left promiscuous mode [ 1051.558795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.596156] device bridge_slave_0 left promiscuous mode [ 1051.601667] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.658726] device bridge_slave_1 left promiscuous mode [ 1051.664374] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.696352] device bridge_slave_0 left promiscuous mode [ 1051.701867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.760862] device veth1_macvtap left promiscuous mode [ 1051.767321] device veth0_macvtap left promiscuous mode [ 1051.772651] device veth1_vlan left promiscuous mode [ 1051.778028] device veth0_vlan left promiscuous mode [ 1051.783440] device veth1_macvtap left promiscuous mode [ 1051.788878] device veth0_macvtap left promiscuous mode [ 1051.794221] device veth1_vlan left promiscuous mode [ 1051.799439] device veth0_vlan left promiscuous mode [ 1061.778248] device hsr_slave_1 left promiscuous mode [ 1061.838020] device hsr_slave_0 left promiscuous mode [ 1061.884140] team0 (unregistering): Port device team_slave_1 removed [ 1061.894349] team0 (unregistering): Port device team_slave_0 removed [ 1061.904355] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1061.949123] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1062.032840] bond0 (unregistering): Released all slaves [ 1062.138849] device hsr_slave_1 left promiscuous mode [ 1062.189847] device hsr_slave_0 left promiscuous mode [ 1062.236566] team0 (unregistering): Port device team_slave_1 removed [ 1062.247220] team0 (unregistering): Port device team_slave_0 removed [ 1062.256828] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1062.298872] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1062.355142] bond0 (unregistering): Released all slaves [ 1062.448675] chnl_net:caif_netlink_parms(): no params data found [ 1062.490415] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.497092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.504146] device bridge_slave_0 entered promiscuous mode [ 1062.512465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.518997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.526410] device bridge_slave_1 entered promiscuous mode [ 1062.546808] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1062.560392] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1062.569897] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1062.588831] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1062.596464] team0: Port device team_slave_0 added [ 1062.602494] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1062.610132] team0: Port device team_slave_1 added [ 1062.630230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.636750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.662331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.677426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.683713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1062.709284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.720924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1062.731282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1062.787142] device hsr_slave_0 entered promiscuous mode [ 1062.815555] device hsr_slave_1 entered promiscuous mode [ 1062.856041] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1062.863617] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1062.984209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.013205] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1063.039262] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1063.053855] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1063.061400] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.076066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1063.083796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.105697] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1063.115842] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1063.135642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1063.144239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1063.157422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.163820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.175467] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1063.211586] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1063.219748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1063.233599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1063.241969] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.248439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.265285] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1063.283754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.291524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1063.304013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1063.312112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1063.329136] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1063.343068] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1063.352300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1063.361259] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1063.374208] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1063.381213] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.390507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1063.399504] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1063.407690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.419756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1063.428503] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1063.448600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1063.466640] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1063.474404] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.480837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.489314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1063.497866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1063.505990] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1063.513607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.520073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.531196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1063.539859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1063.548651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1063.559374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1063.570526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1063.581083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1063.596306] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1063.602441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1063.613505] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1063.635570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1063.643957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1063.667834] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1063.677223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1063.687275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1063.694467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1063.703885] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1063.713873] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1063.723696] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1063.731662] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1063.739391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1063.747430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1063.756211] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1063.769745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.779802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1063.787929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1063.796753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1063.813071] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1063.823605] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1063.832511] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1063.851767] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1063.867583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1063.885605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1063.901654] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1063.910938] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1063.918849] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1063.926720] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1063.940316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1063.967629] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1063.979711] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1063.987000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1063.996569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1064.058243] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1064.067063] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1064.074525] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1064.086284] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1064.098614] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1064.107334] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1064.114567] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1064.123026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1064.137881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1064.153042] device veth0_vlan entered promiscuous mode [ 1064.160959] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1064.169684] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1064.179544] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1064.195243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1064.203542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1064.217467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1064.224486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1064.240248] device veth1_vlan entered promiscuous mode [ 1064.252136] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1064.260998] device veth0_vlan entered promiscuous mode [ 1064.271578] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1064.286474] device veth1_vlan entered promiscuous mode [ 1064.292418] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1064.308913] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1064.323937] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1064.341147] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1064.348644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1064.362690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1064.370748] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1064.383628] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1064.391950] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1064.406153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1064.416813] device veth0_macvtap entered promiscuous mode [ 1064.423217] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1064.444113] device veth1_macvtap entered promiscuous mode [ 1064.456536] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1064.465808] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1064.475709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1064.483137] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1064.500214] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1064.508657] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1064.520505] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1064.528096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1064.536540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1064.546432] device veth0_macvtap entered promiscuous mode [ 1064.552737] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1064.562442] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.574167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.583547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.593700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.602895] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.612701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.622933] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1064.630153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.639790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1064.650629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.661452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1064.671596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.686437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1064.701228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.713297] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1064.720778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1064.731692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1064.739623] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1064.747701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1064.755808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1064.763594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1064.774340] device veth1_macvtap entered promiscuous mode [ 1064.783197] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1064.818983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1064.839660] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1064.849630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.859697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.869305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.879855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.889528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.899675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.909218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1064.919550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1064.932434] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1064.939826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1064.948770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1064.957248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1064.973722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1064.985453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1064.992245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.002251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1065.009221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.330995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1065.340881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.350509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1065.360345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.371073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1065.381000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1065.391298] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1065.398615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1065.407083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1065.415869] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:20:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r2, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r8, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:53 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:53 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xe0000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:54 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r2, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r8, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:54 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1fffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:54 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r2, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r8, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6b6b6b, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:56 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:56 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:20:57 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x0, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:20:57 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:20:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1070.182495] IPVS: ftp: loaded support on port[0] = 21 03:20:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x0, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1070.664751] chnl_net:caif_netlink_parms(): no params data found [ 1070.697852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.704411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.711977] device bridge_slave_0 entered promiscuous mode [ 1070.838542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.845349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.852461] device bridge_slave_1 entered promiscuous mode [ 1070.871542] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1070.994776] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1071.013275] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1071.020659] team0: Port device team_slave_0 added [ 1071.027737] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1071.035228] team0: Port device team_slave_1 added [ 1071.201574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.208270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.233704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.245868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.252170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1071.278129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.289855] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1071.406221] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1071.457349] device hsr_slave_0 entered promiscuous mode [ 1071.495638] device hsr_slave_1 entered promiscuous mode [ 1071.652649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1071.660406] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1071.682226] device bridge_slave_1 left promiscuous mode [ 1071.688044] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.690631] IPVS: ftp: loaded support on port[0] = 21 [ 1071.716636] device bridge_slave_0 left promiscuous mode [ 1071.722278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1071.777930] device veth1_macvtap left promiscuous mode [ 1071.783289] device veth0_macvtap left promiscuous mode [ 1071.791334] device veth1_vlan left promiscuous mode [ 1071.796465] device veth0_vlan left promiscuous mode [ 1076.858061] device hsr_slave_1 left promiscuous mode [ 1076.930134] device hsr_slave_0 left promiscuous mode [ 1076.976403] team0 (unregistering): Port device team_slave_1 removed [ 1076.986997] team0 (unregistering): Port device team_slave_0 removed [ 1076.996979] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1077.028899] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1077.109930] bond0 (unregistering): Released all slaves [ 1077.255719] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1077.314453] chnl_net:caif_netlink_parms(): no params data found [ 1077.410560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1077.418741] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.426075] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.433569] device bridge_slave_0 entered promiscuous mode [ 1077.444902] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1077.453219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.460773] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.468682] device bridge_slave_1 entered promiscuous mode [ 1077.479355] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1077.486175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1077.493345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1077.510898] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1077.517523] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.532786] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1077.544522] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1077.554386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1077.563471] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1077.571705] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.578131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.587749] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1077.599428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1077.607773] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1077.616668] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1077.624850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1077.633215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.639688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1077.657306] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1077.672514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1077.684843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1077.693671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1077.703917] team0: Port device team_slave_0 added [ 1077.712008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1077.731141] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1077.742959] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1077.758706] team0: Port device team_slave_1 added [ 1077.764542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1077.779988] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1077.793167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1077.807688] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1077.816150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1077.824387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1077.842438] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1077.862938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1077.874105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1077.891994] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1077.904837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.918825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.953623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.965578] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1077.974228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1077.992025] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1078.001633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1078.015597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.021932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1078.055627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.083114] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1078.098612] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1078.106560] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1078.127784] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1078.187437] device hsr_slave_0 entered promiscuous mode [ 1078.225582] device hsr_slave_1 entered promiscuous mode [ 1078.267866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1078.274659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1078.294197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1078.301187] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1078.316286] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1078.430141] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1078.444958] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1078.458709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1078.470113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1078.489382] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1078.541398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1078.552102] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1078.562583] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1078.571072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1078.579441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1078.590681] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1078.598647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1078.609596] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1078.616877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1078.624948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1078.634443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1078.640928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1078.652175] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1078.660308] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1078.668585] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1078.677040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1078.684805] bridge0: port 2(bridge_slave_1) entered blocking state [ 1078.691259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.704117] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1078.711896] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1078.719156] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1078.731570] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1078.742434] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1078.750388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1078.758559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1078.776979] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1078.785885] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1078.792765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1078.801327] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1078.811228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1078.819396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1078.838328] device veth0_vlan entered promiscuous mode [ 1078.851835] device veth1_vlan entered promiscuous mode [ 1078.858957] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1078.866262] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1078.873467] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1078.880907] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1078.888532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1078.897872] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1078.906110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1078.914185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1078.925261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1078.936472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1078.944111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1078.953138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1078.960712] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1078.969460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1078.980271] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1078.987005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1078.996193] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1079.233839] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1079.248083] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1079.262593] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1079.270514] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1079.278626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1079.286300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1079.297986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.431478] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1079.439068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1079.448473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1079.466627] device veth0_macvtap entered promiscuous mode [ 1079.472905] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1079.609583] device veth1_macvtap entered promiscuous mode [ 1079.616236] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1079.628697] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1079.637473] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1079.652103] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1079.661766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1079.672279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1079.682465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.692769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1079.704066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.713294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1079.723439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.732961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1079.742864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.754208] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1079.761675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1079.768868] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1079.777177] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1079.784653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1079.793886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1079.802094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1079.810769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1079.938239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1079.948640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.958753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1079.969038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.978244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1079.988210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.997457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1080.007528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.018365] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1080.025815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.034854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1080.043938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1080.056267] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1080.063668] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1080.072143] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1080.100896] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1080.122970] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1080.132708] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1080.266085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1080.273300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1080.282002] device veth0_vlan entered promiscuous mode [ 1080.289362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.297017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.305733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.313228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.679785] device veth1_vlan entered promiscuous mode [ 1080.698996] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1080.830231] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1080.837364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1080.846150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1080.857005] device veth0_macvtap entered promiscuous mode [ 1080.863545] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1080.874059] device veth1_macvtap entered promiscuous mode [ 1080.880380] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready 03:21:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:08 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x0, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1081.334066] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready 03:21:09 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1081.862638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1081.876144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1082.141499] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1082.186175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1082.193062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1082.225193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1082.231971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.281912] device bridge_slave_1 left promiscuous mode [ 1082.288598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.335879] device bridge_slave_0 left promiscuous mode [ 1082.341573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.388793] device veth1_macvtap left promiscuous mode [ 1082.394205] device veth0_macvtap left promiscuous mode [ 1082.401239] device veth1_vlan left promiscuous mode [ 1082.406774] device veth0_vlan left promiscuous mode [ 1087.630145] device hsr_slave_1 left promiscuous mode [ 1087.689990] device hsr_slave_0 left promiscuous mode [ 1087.774530] team0 (unregistering): Port device team_slave_1 removed [ 1087.786197] team0 (unregistering): Port device team_slave_0 removed [ 1087.796869] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1087.831229] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1087.915891] bond0 (unregistering): Released all slaves [ 1087.980469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1087.992330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.002026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1088.012123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.021746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1088.032192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.043123] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1088.050758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.058134] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1088.068553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1088.079585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1088.090773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.100710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1088.112245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.122423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1088.132559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1088.144111] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1088.151808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.161282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1088.169473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:21:17 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:17 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:17 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:17 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:18 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:18 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:18 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:18 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:19 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1092.352358] IPVS: ftp: loaded support on port[0] = 21 [ 1092.909554] chnl_net:caif_netlink_parms(): no params data found [ 1093.164272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.172237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.181504] device bridge_slave_0 entered promiscuous mode [ 1093.191549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.200612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.209314] device bridge_slave_1 entered promiscuous mode [ 1093.237495] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1093.248205] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1093.278423] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1093.291274] team0: Port device team_slave_0 added [ 1093.299367] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1093.307382] team0: Port device team_slave_1 added [ 1093.544507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.547966] IPVS: ftp: loaded support on port[0] = 21 [ 1093.551295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.583512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.817036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.824343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1093.853976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.867448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1094.105407] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1094.176993] device hsr_slave_0 entered promiscuous mode [ 1094.215523] device hsr_slave_1 entered promiscuous mode [ 1094.257570] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1094.481607] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1094.774128] chnl_net:caif_netlink_parms(): no params data found [ 1094.800749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.807853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.816012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.822864] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1094.831392] device bridge_slave_1 left promiscuous mode [ 1094.837094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.876190] device bridge_slave_0 left promiscuous mode [ 1094.881705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.938706] device bridge_slave_1 left promiscuous mode [ 1094.944224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.995828] device bridge_slave_0 left promiscuous mode [ 1095.001363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.061815] device veth1_macvtap left promiscuous mode [ 1095.067419] device veth0_macvtap left promiscuous mode [ 1095.072750] device veth1_vlan left promiscuous mode [ 1095.078285] device veth0_vlan left promiscuous mode [ 1095.083853] device veth1_macvtap left promiscuous mode [ 1095.089252] device veth0_macvtap left promiscuous mode [ 1095.094601] device veth1_vlan left promiscuous mode [ 1095.100031] device veth0_vlan left promiscuous mode [ 1105.238629] device hsr_slave_1 left promiscuous mode [ 1105.300031] device hsr_slave_0 left promiscuous mode [ 1105.366633] team0 (unregistering): Port device team_slave_1 removed [ 1105.377442] team0 (unregistering): Port device team_slave_0 removed [ 1105.387276] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1105.421648] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1105.501530] bond0 (unregistering): Released all slaves [ 1105.636834] device hsr_slave_1 left promiscuous mode [ 1105.678596] device hsr_slave_0 left promiscuous mode [ 1105.723612] team0 (unregistering): Port device team_slave_1 removed [ 1105.733501] team0 (unregistering): Port device team_slave_0 removed [ 1105.743070] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1105.779336] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1105.858969] bond0 (unregistering): Released all slaves [ 1105.954799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.961485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.968891] device bridge_slave_0 entered promiscuous mode [ 1105.976548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.982956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.990280] device bridge_slave_1 entered promiscuous mode [ 1106.013144] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1106.022900] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1106.042824] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1106.051418] team0: Port device team_slave_0 added [ 1106.057811] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1106.067513] team0: Port device team_slave_1 added [ 1106.074515] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1106.093803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.100432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.128800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.141376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.148008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.173355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.187048] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1106.200074] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1106.338021] device hsr_slave_0 entered promiscuous mode [ 1106.365535] device hsr_slave_1 entered promiscuous mode [ 1106.416107] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1106.423605] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1106.490171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.519061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1106.550165] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1106.560782] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1106.577813] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1106.607926] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1106.614050] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.630140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1106.637822] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1106.647016] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1106.654797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.661245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.680059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1106.691532] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1106.704469] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1106.714469] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1106.730823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.737430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.748069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1106.759457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1106.776495] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1106.795323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1106.807027] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1106.818937] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1106.826697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1106.834642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1106.845525] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1106.859305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1106.868531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1106.881039] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1106.902423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1106.911451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1106.925267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1106.935394] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1106.942737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1106.950866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1106.973055] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1106.979376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1107.031963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.041273] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1107.058936] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1107.071654] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1107.079534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.091495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.102091] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1107.114521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.122151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1107.130234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1107.141417] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1107.148556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.174107] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1107.187683] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1107.196636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1107.204651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1107.213891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.220484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.231345] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1107.241697] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1107.250330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1107.262790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.271493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.280525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1107.289419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.297596] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.304017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.314044] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1107.326466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.337728] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1107.345769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.360525] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1107.367555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.375744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1107.393471] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1107.411992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1107.425428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.433456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1107.447031] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1107.472615] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1107.481276] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1107.494290] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1107.502646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1107.516841] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1107.526586] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1107.533609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.541859] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1107.553350] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1107.560400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1107.570797] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1107.580590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.591346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.600257] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.609011] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.623218] device veth0_vlan entered promiscuous mode [ 1107.640104] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1107.660461] device veth1_vlan entered promiscuous mode [ 1107.671664] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1107.680142] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1107.697200] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1107.710706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1107.717713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1107.727889] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1107.745694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.770843] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1107.782112] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1107.790402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1107.798179] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.806724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.817629] device veth0_macvtap entered promiscuous mode [ 1107.823875] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1107.833631] device veth1_macvtap entered promiscuous mode [ 1107.840522] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1107.853219] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1107.862954] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1107.880631] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1107.889792] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1107.899198] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.917589] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1107.937877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.948561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.961726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.972128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.982030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1107.992208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.001409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.011593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.021885] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1108.029050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.040528] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.049000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.058347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.068263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.078266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.088299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.097517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.107271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.117763] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1108.124685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.133650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.142702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.160343] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1108.181195] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1108.193752] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1108.211272] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1108.218494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1108.230092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1108.238361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1108.246131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1108.256911] device veth0_vlan entered promiscuous mode [ 1108.268920] device veth1_vlan entered promiscuous mode [ 1108.274911] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1108.284558] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1108.304521] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1108.319261] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1108.327240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1108.336009] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1108.349527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.359018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.373024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1108.379988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1108.389857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1108.398783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1108.635917] device veth0_macvtap entered promiscuous mode [ 1108.642515] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1108.662649] device veth1_macvtap entered promiscuous mode [ 1108.668991] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1108.687937] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1108.698550] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1108.709227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.719139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.729273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.739456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.749103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1108.759421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.769800] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1108.776947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.784446] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.791923] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1108.799400] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.807993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.819677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.830008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.839706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.850250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.859589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1108.869541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.879808] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1108.888246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.897121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.904967] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 03:21:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x5000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1109.107420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1109.115462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1109.137541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1109.144636] batman_adv: batadv0: Removing interface: batadv_slave_1 03:21:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:40 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x7000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:41 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1113.866972] IPVS: ftp: loaded support on port[0] = 21 [ 1114.206879] chnl_net:caif_netlink_parms(): no params data found [ 1114.233175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.239698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.247635] device bridge_slave_0 entered promiscuous mode [ 1114.362074] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.368870] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.376579] device bridge_slave_1 entered promiscuous mode [ 1114.393645] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1114.509430] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1114.524480] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1114.532388] team0: Port device team_slave_0 added [ 1114.538437] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1114.545908] team0: Port device team_slave_1 added [ 1114.563145] device bridge_slave_1 left promiscuous mode [ 1114.569000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.625857] device bridge_slave_0 left promiscuous mode [ 1114.631374] bridge0: port 1(bridge_slave_0) entered disabled state [ 1114.689121] device veth1_macvtap left promiscuous mode [ 1114.694496] device veth0_macvtap left promiscuous mode [ 1114.699942] device veth1_vlan left promiscuous mode [ 1114.705083] device veth0_vlan left promiscuous mode [ 1119.601229] device hsr_slave_1 left promiscuous mode [ 1119.688472] device hsr_slave_0 left promiscuous mode [ 1119.735190] team0 (unregistering): Port device team_slave_1 removed [ 1119.745503] team0 (unregistering): Port device team_slave_0 removed [ 1119.755289] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1119.790466] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1119.851899] bond0 (unregistering): Released all slaves [ 1119.900239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.906635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.932358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.945896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.952342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.977704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1119.989313] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1119.997370] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1120.058234] device hsr_slave_0 entered promiscuous mode [ 1120.095400] device hsr_slave_1 entered promiscuous mode [ 1120.136034] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1120.143545] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1120.259524] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1120.310722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.321634] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1120.333226] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1120.341375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1120.349644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1120.360579] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1120.370429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.382885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1120.393643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1120.403739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1120.416913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.423448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.438008] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1120.446209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1120.453580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1120.462555] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1120.470980] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.477409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.489477] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1120.497890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1120.510891] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1120.518598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1120.531498] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1120.545110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1120.554196] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1120.570097] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1120.581064] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1120.590584] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1120.602179] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1120.621949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1120.632870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1120.644201] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1120.651673] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1120.660897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1120.682027] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1120.689658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1120.701657] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1120.709040] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1120.717142] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1120.731720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.820065] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1120.834442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1120.901234] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1120.911554] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1120.923740] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1120.940391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1120.948927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1120.960921] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1120.973048] device veth0_vlan entered promiscuous mode [ 1120.988190] device veth1_vlan entered promiscuous mode [ 1121.009642] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1121.022205] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1121.030297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1121.039594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1121.050837] device veth0_macvtap entered promiscuous mode [ 1121.058451] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1121.073369] device veth1_macvtap entered promiscuous mode [ 1121.079666] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1121.092864] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1121.109857] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1121.120090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1121.134569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.145160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1121.154904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.164197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1121.174118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.184499] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1121.191729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1121.199523] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1121.207883] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1121.215174] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1121.223069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1121.234152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1121.244321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.253566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1121.264447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.273739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1121.283534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1121.299551] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1121.307100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1121.314262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1121.323739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1121.489946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1121.496942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1121.505583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1121.512366] batman_adv: batadv0: Removing interface: batadv_slave_1 03:21:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:51 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:51 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x9000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:21:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:21:52 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:21:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1125.195954] IPVS: ftp: loaded support on port[0] = 21 [ 1125.641798] chnl_net:caif_netlink_parms(): no params data found [ 1125.669120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.675762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.683078] device bridge_slave_0 entered promiscuous mode [ 1125.798731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1125.805262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1125.812333] device bridge_slave_1 entered promiscuous mode [ 1125.828703] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1125.946718] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1125.964034] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1125.972015] team0: Port device team_slave_0 added [ 1125.977970] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1125.985666] team0: Port device team_slave_1 added [ 1126.105149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1126.111590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.138072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.149733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.156202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.182297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.194819] device bridge_slave_1 left promiscuous mode [ 1126.200543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.255923] device bridge_slave_0 left promiscuous mode [ 1126.261554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.319727] device veth1_macvtap left promiscuous mode [ 1126.325362] device veth0_macvtap left promiscuous mode [ 1126.330692] device veth1_vlan left promiscuous mode [ 1126.335907] device veth0_vlan left promiscuous mode [ 1131.278237] device hsr_slave_1 left promiscuous mode [ 1131.318820] device hsr_slave_0 left promiscuous mode [ 1131.363991] team0 (unregistering): Port device team_slave_1 removed [ 1131.375675] team0 (unregistering): Port device team_slave_0 removed [ 1131.385776] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1131.438785] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1131.531437] bond0 (unregistering): Released all slaves [ 1131.579045] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1131.591790] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1131.594768] IPVS: ftp: loaded support on port[0] = 21 [ 1131.657015] device hsr_slave_0 entered promiscuous mode [ 1131.695417] device hsr_slave_1 entered promiscuous mode [ 1131.736036] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1131.745945] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1131.938283] chnl_net:caif_netlink_parms(): no params data found [ 1131.987907] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.994406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.002439] device bridge_slave_0 entered promiscuous mode [ 1132.011857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.018689] bridge0: port 2(bridge_slave_1) entered disabled state [ 1132.026812] device bridge_slave_1 entered promiscuous mode [ 1132.052362] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1132.062475] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1132.081991] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1132.094080] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1132.108036] team0: Port device team_slave_0 added [ 1132.114164] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1132.127382] team0: Port device team_slave_1 added [ 1132.150883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1132.160243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.190907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1132.203636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1132.215195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1132.241608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1132.253742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1132.261975] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1132.338629] device hsr_slave_0 entered promiscuous mode [ 1132.399509] device hsr_slave_1 entered promiscuous mode [ 1132.474167] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1132.482277] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1132.500935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.524306] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1132.540023] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1132.559775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1132.576972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1132.595395] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1132.601514] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.636128] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1132.646622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1132.654536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1132.662720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.669173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.683965] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1132.691964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1132.700363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1132.708943] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1132.720233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.726699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.743884] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1132.758769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1132.770866] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1132.782984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1132.807468] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1132.814810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1132.823663] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1132.840950] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1132.852020] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1132.862462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1132.873514] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1132.883085] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1132.892608] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1132.901103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1132.911008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1132.927607] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1132.937058] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1132.944743] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1132.956314] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1132.962588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1133.004510] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1133.030899] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1133.041111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1133.051934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1133.068315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.079855] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1133.089809] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1133.099042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.106066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1133.113378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1133.123678] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1133.130651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.141276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1133.150286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1133.159192] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1133.167430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.173813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.191836] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1133.199863] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1133.208174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1133.226030] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.233762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.240366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.251380] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1133.258938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1133.271875] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1133.279687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1133.291534] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1133.302631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1133.311579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1133.321570] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1133.335266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1133.344160] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1133.352540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1133.361434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1133.373745] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1133.388473] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1133.402466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1133.414899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1133.423142] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1133.431171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1133.443719] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1133.454354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1133.463359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1133.473888] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1133.481283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1133.501348] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1133.509456] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1133.516799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1133.523618] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1133.538032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1133.551705] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1133.559291] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1133.566549] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1133.799537] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1133.812192] device veth0_vlan entered promiscuous mode [ 1133.818835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1133.827062] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1133.836097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1133.843108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1133.968047] device veth1_vlan entered promiscuous mode [ 1133.976031] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1133.992679] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1134.000904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1134.013067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1134.030127] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1134.153114] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1134.161342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1134.174317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1134.185612] device veth0_macvtap entered promiscuous mode [ 1134.192164] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1134.203197] device veth1_macvtap entered promiscuous mode [ 1134.209649] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1134.220483] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1134.346748] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1134.358945] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1134.366257] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1134.373140] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1134.390911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1134.400856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.410684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1134.420576] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.430101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1134.439950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.450170] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1134.457610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1134.465998] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1134.584177] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1134.591643] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1134.599089] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1134.607241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1134.615544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1134.623386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1134.632220] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1134.640085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1134.649536] device veth0_vlan entered promiscuous mode [ 1134.659162] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1134.668999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.678674] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1134.688557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.698059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1134.707850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1134.718601] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1134.727216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1134.849760] device veth1_vlan entered promiscuous mode [ 1134.857819] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1134.864574] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1134.872135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1134.880527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1135.217562] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1135.225798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1135.232679] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.240782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.248078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1135.466770] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1135.475732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1135.483493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1135.492859] device veth0_macvtap entered promiscuous mode [ 1135.502350] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1135.637926] device veth1_macvtap entered promiscuous mode [ 1135.644258] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1135.654600] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1135.666587] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready 03:22:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:03 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:03 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:03 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xa000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1136.161996] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1136.182184] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 03:22:04 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1136.706822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 03:22:04 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1136.750861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.789684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1136.832303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.868785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1136.914183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.978573] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1137.034580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.081433] device bridge_slave_1 left promiscuous mode [ 1137.094006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.166551] device bridge_slave_0 left promiscuous mode [ 1137.173401] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.250508] device veth1_macvtap left promiscuous mode [ 1137.259162] device veth0_macvtap left promiscuous mode [ 1137.268145] device veth1_vlan left promiscuous mode [ 1137.273525] device veth0_vlan left promiscuous mode [ 1142.441143] device hsr_slave_1 left promiscuous mode [ 1142.488274] device hsr_slave_0 left promiscuous mode [ 1142.534609] team0 (unregistering): Port device team_slave_1 removed [ 1142.544795] team0 (unregistering): Port device team_slave_0 removed [ 1142.554851] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1142.600202] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1142.669968] bond0 (unregistering): Released all slaves 03:22:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x10000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1142.729584] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1142.742340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 03:22:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1142.781701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1142.805285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.818973] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1142.839174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.850794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1142.869850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.886209] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1142.893266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.923985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1142.940248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1143.202670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1143.209707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.218690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1143.225506] batman_adv: batadv0: Removing interface: batadv_slave_1 03:22:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:12 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x0, &(0x7f0000000800)}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12020000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:12 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1f000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:13 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x0, &(0x7f0000000800)}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x0, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x20000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1147.631753] IPVS: ftp: loaded support on port[0] = 21 [ 1147.903103] chnl_net:caif_netlink_parms(): no params data found [ 1148.143629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.150243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.157927] device bridge_slave_0 entered promiscuous mode [ 1148.165158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.171628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.178865] device bridge_slave_1 entered promiscuous mode [ 1148.449566] IPVS: ftp: loaded support on port[0] = 21 [ 1148.467413] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1148.477639] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1148.507734] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1148.515211] team0: Port device team_slave_0 added [ 1148.522660] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1148.530220] team0: Port device team_slave_1 added [ 1148.554784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.561354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.586880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1148.601123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1148.608218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.633559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1148.853102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1148.864891] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1149.168103] device hsr_slave_0 entered promiscuous mode [ 1149.205757] device hsr_slave_1 entered promiscuous mode [ 1149.256316] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1149.477904] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1149.484799] chnl_net:caif_netlink_parms(): no params data found [ 1149.750497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1149.757101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1149.764188] device bridge_slave_0 entered promiscuous mode [ 1149.774439] bridge0: port 2(bridge_slave_1) entered blocking state [ 1149.781626] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.789055] device bridge_slave_1 entered promiscuous mode [ 1150.030113] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1150.040413] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1150.066376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1150.073822] team0: Port device team_slave_0 added [ 1150.082974] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1150.090865] team0: Port device team_slave_1 added [ 1150.098565] device bridge_slave_1 left promiscuous mode [ 1150.104100] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.146078] device bridge_slave_0 left promiscuous mode [ 1150.151832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.207889] device bridge_slave_1 left promiscuous mode [ 1150.213526] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.247157] device bridge_slave_0 left promiscuous mode [ 1150.253405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.301084] device veth1_macvtap left promiscuous mode [ 1150.306650] device veth0_macvtap left promiscuous mode [ 1150.311963] device veth1_vlan left promiscuous mode [ 1150.317088] device veth0_vlan left promiscuous mode [ 1150.322458] device veth1_macvtap left promiscuous mode [ 1150.328022] device veth0_macvtap left promiscuous mode [ 1150.333367] device veth1_vlan left promiscuous mode [ 1150.338833] device veth0_vlan left promiscuous mode [ 1160.228547] device hsr_slave_1 left promiscuous mode [ 1160.278206] device hsr_slave_0 left promiscuous mode [ 1160.325706] team0 (unregistering): Port device team_slave_1 removed [ 1160.335858] team0 (unregistering): Port device team_slave_0 removed [ 1160.346579] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1160.381748] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1160.468717] bond0 (unregistering): Released all slaves [ 1160.560966] device hsr_slave_1 left promiscuous mode [ 1160.608096] device hsr_slave_0 left promiscuous mode [ 1160.654582] team0 (unregistering): Port device team_slave_1 removed [ 1160.664983] team0 (unregistering): Port device team_slave_0 removed [ 1160.674750] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1160.721158] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1160.777752] bond0 (unregistering): Released all slaves [ 1160.848365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.854889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.880819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.895837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.902169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.927910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.939361] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1160.949698] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1160.998130] device hsr_slave_0 entered promiscuous mode [ 1161.035619] device hsr_slave_1 entered promiscuous mode [ 1161.076105] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1161.083634] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1161.198867] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1161.312159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.348232] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1161.358728] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1161.366841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1161.374175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.385992] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1161.392135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.414259] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1161.423011] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1161.431133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1161.440108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.448572] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.455069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.466514] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1161.485566] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.492932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.502312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.510646] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.517095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.528879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1161.546115] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1161.565389] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1161.574094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1161.590199] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1161.607743] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1161.621570] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1161.632646] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1161.646899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1161.660383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.668068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1161.677160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1161.696218] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1161.708148] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1161.717212] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1161.726155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1161.736418] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1161.747175] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1161.753307] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.761993] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1161.770855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1161.778806] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1161.786682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1161.794512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1161.805465] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1161.811657] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1161.831181] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1161.839204] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1161.853358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1161.862143] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1161.875380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.881907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.896913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1161.905960] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1161.913923] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1161.921589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1161.937169] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1161.951109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1161.960095] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1161.973970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.980571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.996209] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1162.013603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.020870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1162.037892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1162.056028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1162.077941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1162.093275] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1162.101604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1162.116098] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1162.124439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1162.141369] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1162.156722] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1162.173254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1162.190857] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1162.210762] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1162.218839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1162.229901] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 1162.240566] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 1162.253154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1162.270103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1162.278462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1162.286781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1162.296981] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1162.303077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1162.333448] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1162.342432] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1162.352998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1162.362087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1162.374389] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1162.382501] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1162.390109] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1162.403219] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1162.411021] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1162.419902] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1162.434845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.446743] device veth0_vlan entered promiscuous mode [ 1162.455264] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1162.462358] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1162.474611] device veth1_vlan entered promiscuous mode [ 1162.490108] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1162.506987] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1162.529344] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1162.540737] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1162.548569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1162.558687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1162.566969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1162.574904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1162.587027] device veth0_macvtap entered promiscuous mode [ 1162.593572] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1162.607463] device veth1_macvtap entered promiscuous mode [ 1162.613953] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1162.626410] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1162.638687] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1162.654044] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1162.662257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1162.673015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.683041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1162.693538] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.703324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1162.713534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.724621] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1162.733540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1162.746047] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 1162.753231] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1162.761807] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1162.770369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1162.779310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1162.788486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1162.797349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1162.818841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1162.829269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.838919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1162.850568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.860374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1162.870453] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1162.881033] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1162.888974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1162.897036] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1162.904936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1162.970001] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1162.991969] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1163.010264] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1163.023689] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1163.035885] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1163.043555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1163.053066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1163.062513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1163.072434] device veth0_vlan entered promiscuous mode [ 1163.083904] device veth1_vlan entered promiscuous mode [ 1163.090203] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1163.119394] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1163.162081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.169651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.193662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.201645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.621348] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1163.644803] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1163.653424] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1163.661588] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1163.672646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1163.680853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1163.691524] device veth0_macvtap entered promiscuous mode [ 1163.701849] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1163.716011] device veth1_macvtap entered promiscuous mode [ 1163.723357] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1163.736536] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1163.748280] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1163.759110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1163.769327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.778562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1163.788437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.797657] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1163.807463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 03:22:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:31 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x0, &(0x7f0000000800)}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:31 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x0, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x22000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1163.818082] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1163.829560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1163.842192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1163.888128] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1163.901797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1163.914350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1163.926178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1163.945494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1163.978479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1164.000226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.048218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1164.143558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1164.277620] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1164.294928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1164.313990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1164.358727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1164.654806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1164.661849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1164.671416] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1164.678428] batman_adv: batadv0: Removing interface: batadv_slave_1 03:22:32 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:33 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x0, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:33 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x3c, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec31"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2c000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r2, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:33 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3f000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:34 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:34 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x3c, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec31"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r2, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:34 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r2, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x40000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:35 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x3c, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec31"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:35 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:35 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:36 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x0, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1169.299039] IPVS: ftp: loaded support on port[0] = 21 [ 1169.638025] chnl_net:caif_netlink_parms(): no params data found [ 1169.669829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.676408] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.683433] device bridge_slave_0 entered promiscuous mode [ 1169.794943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.801452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.809052] device bridge_slave_1 entered promiscuous mode [ 1169.823970] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1169.833257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1169.953947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1169.961392] team0: Port device team_slave_0 added [ 1169.967269] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1169.975291] team0: Port device team_slave_1 added [ 1169.987757] device bridge_slave_1 left promiscuous mode [ 1169.993278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.036095] device bridge_slave_0 left promiscuous mode [ 1170.041610] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.099691] device veth1_macvtap left promiscuous mode [ 1170.105158] device veth0_macvtap left promiscuous mode [ 1170.110535] device veth1_vlan left promiscuous mode [ 1170.115705] device veth0_vlan left promiscuous mode [ 1174.908468] device hsr_slave_1 left promiscuous mode [ 1174.978303] device hsr_slave_0 left promiscuous mode [ 1175.024170] team0 (unregistering): Port device team_slave_1 removed [ 1175.034351] team0 (unregistering): Port device team_slave_0 removed [ 1175.044136] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1175.078689] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1175.158090] bond0 (unregistering): Released all slaves [ 1175.218972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1175.225574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.251185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1175.263507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1175.270096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1175.297305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1175.308758] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1175.316569] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1175.377068] device hsr_slave_0 entered promiscuous mode [ 1175.415467] device hsr_slave_1 entered promiscuous mode [ 1175.456002] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1175.463395] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1175.593073] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1175.654404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1175.670119] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1175.686881] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1175.693769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1175.706237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1175.716684] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1175.722805] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.734144] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1175.745837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1175.754414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1175.767664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.774062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.787107] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1175.796168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1175.803512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1175.812581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1175.820907] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.827434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.838358] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1175.846586] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1175.860339] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1175.869496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1175.884974] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1175.899479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1175.909550] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1175.923472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1175.931345] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1175.939647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1175.948264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1175.966689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1175.974420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1175.983801] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1175.990457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1176.010327] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1176.019083] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1176.029241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1176.037108] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1176.050095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1176.069472] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1176.081515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1176.149037] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1176.157092] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1176.164296] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1176.177935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1176.186929] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1176.194030] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1176.204163] device veth0_vlan entered promiscuous mode [ 1176.218505] device veth1_vlan entered promiscuous mode [ 1176.224692] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1176.232426] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1176.253121] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1176.265789] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1176.272813] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1176.282538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1176.293939] device veth0_macvtap entered promiscuous mode [ 1176.301707] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1176.312158] device veth1_macvtap entered promiscuous mode [ 1176.319625] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1176.331062] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1176.343183] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1176.354855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1176.365383] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.374522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1176.385140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.394308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1176.404559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.416100] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1176.423168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1176.430637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1176.439052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1176.446604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1176.454424] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1176.464731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1176.475701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.484840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1176.496640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.506207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1176.516438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1176.526769] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1176.533686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1176.540996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1176.549267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1176.683171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1176.690432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1176.699301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1176.706430] batman_adv: batadv0: Removing interface: batadv_slave_1 03:22:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:45 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:45 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x5a, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:45 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x48000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:45 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:46 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:46 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x5a, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x4c000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:46 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r4, 0x0) accept4$vsock_stream(r4, 0x0, 0x0, 0x0) close(r4) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r5 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:47 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:47 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x5a, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x60000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:48 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:48 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:48 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c385"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x68000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) [ 1181.942230] IPVS: ftp: loaded support on port[0] = 21 [ 1182.133558] chnl_net:caif_netlink_parms(): no params data found [ 1182.295562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.302129] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.309299] device bridge_slave_0 entered promiscuous mode [ 1182.317310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1182.323765] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.331531] device bridge_slave_1 entered promiscuous mode [ 1182.451275] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1182.461594] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1182.585555] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1182.593211] team0: Port device team_slave_0 added [ 1182.599685] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1182.607908] team0: Port device team_slave_1 added [ 1182.624037] device bridge_slave_1 left promiscuous mode [ 1182.629732] bridge0: port 2(bridge_slave_1) entered disabled state [ 1182.676047] device bridge_slave_0 left promiscuous mode [ 1182.681552] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.737829] device veth1_macvtap left promiscuous mode [ 1182.743281] device veth0_macvtap left promiscuous mode [ 1182.748963] device veth1_vlan left promiscuous mode [ 1182.754036] device veth0_vlan left promiscuous mode [ 1187.637270] device hsr_slave_1 left promiscuous mode [ 1187.690086] device hsr_slave_0 left promiscuous mode [ 1187.745575] team0 (unregistering): Port device team_slave_1 removed [ 1187.755742] team0 (unregistering): Port device team_slave_0 removed [ 1187.765401] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1187.789395] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1187.870077] bond0 (unregistering): Released all slaves [ 1187.911107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.917626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.942972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.956770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.963137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.988584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.999845] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1188.008044] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1188.058065] device hsr_slave_0 entered promiscuous mode [ 1188.095547] device hsr_slave_1 entered promiscuous mode [ 1188.136102] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1188.143798] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1188.267203] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1188.323680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.333654] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1188.344223] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1188.352189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1188.360348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1188.370962] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1188.377800] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.388437] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1188.395931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1188.403981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1188.412833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1188.419386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1188.430767] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1188.438643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1188.446719] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1188.454710] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1188.463156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.469699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.482490] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1188.490008] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1188.502071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1188.510221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1188.522413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1188.532003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1188.541224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1188.552955] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1188.561076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1188.569284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1188.577831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1188.599680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1188.613848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1188.629634] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1188.636653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1188.650282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1188.665864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1188.676869] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1188.685891] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1188.692545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1188.702027] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1188.715353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.784207] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1188.801669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1188.871566] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1188.880288] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1188.894923] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1188.912585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1188.921419] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1188.933141] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1188.943396] device veth0_vlan entered promiscuous mode [ 1188.961846] device veth1_vlan entered promiscuous mode [ 1188.993205] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1189.004990] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1189.017182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1189.030699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1189.042246] device veth0_macvtap entered promiscuous mode [ 1189.050024] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1189.060948] device veth1_macvtap entered promiscuous mode [ 1189.068498] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1189.080366] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1189.092039] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1189.102257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1189.112828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.122803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1189.134005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.143656] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1189.153842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.164602] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1189.171891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1189.179186] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1189.187327] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1189.194599] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1189.202622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1189.212833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1189.223114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.232382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1189.242618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.252073] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1189.261993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1189.272355] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1189.279413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1189.287619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1189.296001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1189.438545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1189.445977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1189.453962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.460845] batman_adv: batadv0: Removing interface: batadv_slave_1 03:22:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:58 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c385"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6b6b6b00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:58 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:59 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:22:59 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c385"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:22:59 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x6c000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:22:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:00 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x74000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:00 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x71, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb95"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:00 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, 0x0, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:01 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:01 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x71, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb95"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x7a000000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1194.674041] IPVS: ftp: loaded support on port[0] = 21 [ 1194.991216] chnl_net:caif_netlink_parms(): no params data found [ 1195.023107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1195.029728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.037967] device bridge_slave_0 entered promiscuous mode [ 1195.161913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1195.169413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.176763] device bridge_slave_1 entered promiscuous mode [ 1195.195308] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1195.206115] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1195.344906] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1195.352554] team0: Port device team_slave_0 added [ 1195.358463] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1195.366376] team0: Port device team_slave_1 added [ 1195.379611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1195.386677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1195.412458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1195.425902] device bridge_slave_1 left promiscuous mode [ 1195.431464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.456086] device bridge_slave_0 left promiscuous mode [ 1195.461835] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.519709] device veth1_macvtap left promiscuous mode [ 1195.525556] device veth0_macvtap left promiscuous mode [ 1195.530890] device veth1_vlan left promiscuous mode [ 1195.536065] device veth0_vlan left promiscuous mode [ 1200.339624] device hsr_slave_1 left promiscuous mode [ 1200.379589] device hsr_slave_0 left promiscuous mode [ 1200.425705] team0 (unregistering): Port device team_slave_1 removed [ 1200.436836] team0 (unregistering): Port device team_slave_0 removed [ 1200.447240] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1200.481470] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1200.539172] bond0 (unregistering): Released all slaves [ 1200.579860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1200.586596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1200.612379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1200.624189] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1200.632235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1200.687218] device hsr_slave_0 entered promiscuous mode [ 1200.735607] device hsr_slave_1 entered promiscuous mode [ 1200.786061] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1200.793740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1200.932143] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1200.998007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1201.013179] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1201.024126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1201.037802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1201.050710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1201.061401] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1201.073278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1201.084381] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1201.096997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1201.110154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1201.119050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1201.125674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1201.140810] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1201.150718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1201.161410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1201.171815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1201.182471] bridge0: port 2(bridge_slave_1) entered blocking state [ 1201.188944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1201.204260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1201.213164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1201.230928] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1201.242937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1201.260981] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1201.268269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1201.281895] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1201.297145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1201.305220] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1201.312864] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1201.321984] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1201.339512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1201.349552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1201.361333] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1201.368872] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1201.378578] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1201.394398] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1201.401847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1201.418222] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1201.431119] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1201.440689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1201.456925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1201.476397] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1201.490167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1201.559749] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1201.567941] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1201.576394] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1201.589864] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1201.598532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1201.606760] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1201.616241] device veth0_vlan entered promiscuous mode [ 1201.630790] device veth1_vlan entered promiscuous mode [ 1201.652113] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1201.664407] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1201.672489] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1201.681964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1201.693227] device veth0_macvtap entered promiscuous mode [ 1201.702809] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1201.713655] device veth1_macvtap entered promiscuous mode [ 1201.720367] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1201.731853] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1201.744358] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1201.754832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.766738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.776135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.786646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.796014] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1201.805956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.816359] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1201.823550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1201.831068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1201.838926] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1201.846495] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1201.854537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1201.865093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1201.874943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.884471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1201.895687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.905108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1201.915183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1201.925802] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1201.932823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1201.940522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1201.949291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1202.106767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1202.113719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1202.122692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1202.129538] batman_adv: batadv0: Removing interface: batadv_slave_1 03:23:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:10 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:10 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x71, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb95"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:10 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x0, &(0x7f0000000800)}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x8cffffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r3, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r7}, 0xffffffffffffff7c) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:11 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:11 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x0, &(0x7f0000000800)}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x97ffffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x75, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:12 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:12 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x75, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:13 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x0, &(0x7f0000000800)}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xbf0e0000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:13 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:13 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x75, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:14 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x3c, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec31"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xc0ed0000, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:14 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1207.192785] IPVS: ftp: loaded support on port[0] = 21 [ 1207.713634] chnl_net:caif_netlink_parms(): no params data found [ 1207.849994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.856519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.863653] device bridge_slave_0 entered promiscuous mode [ 1207.979264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1207.985805] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.992897] device bridge_slave_1 entered promiscuous mode [ 1208.117291] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1208.126823] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1208.144731] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1208.152473] team0: Port device team_slave_0 added [ 1208.159181] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1208.166892] team0: Port device team_slave_1 added [ 1208.183795] device bridge_slave_1 left promiscuous mode [ 1208.189588] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.246110] device bridge_slave_0 left promiscuous mode [ 1208.251771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.289593] device veth1_macvtap left promiscuous mode [ 1208.294990] device veth0_macvtap left promiscuous mode [ 1208.300614] device veth1_vlan left promiscuous mode [ 1208.307411] device veth0_vlan left promiscuous mode [ 1213.258177] device hsr_slave_1 left promiscuous mode [ 1213.318470] device hsr_slave_0 left promiscuous mode [ 1213.355600] team0 (unregistering): Port device team_slave_1 removed [ 1213.366417] team0 (unregistering): Port device team_slave_0 removed [ 1213.376764] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1213.411844] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1213.472053] bond0 (unregistering): Released all slaves [ 1213.510548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.517065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.544191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.558800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.565343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1213.591171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.603078] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1213.611438] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1213.657329] device hsr_slave_0 entered promiscuous mode [ 1213.695546] device hsr_slave_1 entered promiscuous mode [ 1213.736130] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1213.743771] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1213.882109] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1213.986505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.001428] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1214.014316] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1214.026989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1214.034954] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1214.053210] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1214.060790] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.076277] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1214.083761] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1214.098439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1214.110816] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.117578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.132830] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1214.140713] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1214.153829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1214.162376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1214.175960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.182375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.196990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1214.205699] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1214.217859] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1214.225561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1214.241841] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1214.250039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1214.259541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1214.271168] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1214.279748] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1214.288117] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1214.297770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1214.322886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1214.332503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1214.346297] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1214.352854] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1214.379858] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1214.389269] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1214.402423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1214.410663] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1214.428091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.514151] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1214.530904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1214.627782] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1214.641138] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1214.650387] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1214.663601] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 1214.671220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1214.681356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1214.690688] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1214.698553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1214.711550] device veth0_vlan entered promiscuous mode [ 1214.722442] device veth1_vlan entered promiscuous mode [ 1214.729067] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1214.740418] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1214.757986] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1214.769572] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1214.777283] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1214.786489] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1214.794113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1214.803499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1214.822785] device veth0_macvtap entered promiscuous mode [ 1214.831648] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1214.841506] device veth1_macvtap entered promiscuous mode [ 1214.848519] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1214.860077] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1214.872896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1214.883795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1214.894553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.904560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1214.915104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.924968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1214.935559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1214.947080] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1214.954408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1214.962367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1214.970816] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1214.978644] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1214.987216] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1214.998880] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1215.009227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.019749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1215.033782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.044417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1215.058853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.070002] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1215.080637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1215.089559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1215.101702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1215.280651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1215.288180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1215.303961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1215.310953] batman_adv: batadv0: Removing interface: batadv_slave_1 03:23:24 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:24 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:24 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x3c, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec31"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:24 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x77, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d3"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:24 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xf6ffffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:25 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:25 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfcfdffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:25 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x3c, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec31"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:25 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x77, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d3"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:26 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x5a, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfdfdffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:26 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x77, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d3"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:27 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:27 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x5a, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfdffffff, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1220.527899] IPVS: ftp: loaded support on port[0] = 21 [ 1220.848339] chnl_net:caif_netlink_parms(): no params data found [ 1221.207221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.213760] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.221020] device bridge_slave_0 entered promiscuous mode [ 1221.228433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.235216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.242394] device bridge_slave_1 entered promiscuous mode [ 1221.259113] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1221.375966] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1221.391363] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1221.398917] team0: Port device team_slave_0 added [ 1221.404633] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1221.412373] team0: Port device team_slave_1 added [ 1221.532439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1221.538837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.564306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1221.576503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1221.582777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1221.608254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.621095] device bridge_slave_1 left promiscuous mode [ 1221.626791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.666536] device bridge_slave_0 left promiscuous mode [ 1221.672123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.737934] device veth1_macvtap left promiscuous mode [ 1221.743255] device veth0_macvtap left promiscuous mode [ 1221.749086] device veth1_vlan left promiscuous mode [ 1221.754167] device veth0_vlan left promiscuous mode [ 1226.588065] device hsr_slave_1 left promiscuous mode [ 1226.629583] device hsr_slave_0 left promiscuous mode [ 1226.675498] team0 (unregistering): Port device team_slave_1 removed [ 1226.688926] team0 (unregistering): Port device team_slave_0 removed [ 1226.698739] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1226.749181] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1226.808255] bond0 (unregistering): Released all slaves [ 1226.861869] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1226.872493] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1226.938119] device hsr_slave_0 entered promiscuous mode [ 1226.975577] device hsr_slave_1 entered promiscuous mode [ 1227.046293] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1227.053738] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1227.140386] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1227.188757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.200915] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1227.211500] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1227.218870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1227.227178] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1227.237777] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1227.243881] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.260023] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1227.271345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1227.281291] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1227.297150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.303559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.316606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1227.325621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1227.332991] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1227.342454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1227.350923] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.357353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.368279] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1227.377706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1227.393655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1227.403257] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1227.421397] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1227.429163] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1227.438353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1227.449847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1227.458443] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1227.466732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1227.474772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1227.492765] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1227.502857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1227.513864] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1227.522122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1227.530980] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1227.551728] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1227.560640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1227.574430] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1227.583744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1227.593894] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1227.610384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.642281] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1227.660348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1227.738405] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1227.750722] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1227.759190] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1227.779865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1227.792338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1227.800137] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1227.814419] device veth0_vlan entered promiscuous mode [ 1227.828562] device veth1_vlan entered promiscuous mode [ 1227.834911] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 1227.853729] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 1227.874660] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1227.884242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1227.905322] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1227.916939] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1227.930370] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1227.939219] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1227.953842] device veth0_macvtap entered promiscuous mode [ 1227.961398] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1227.974666] device veth1_macvtap entered promiscuous mode [ 1227.981773] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1227.998485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1228.015896] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1228.025617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.036375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.045859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.056447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.065738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1228.075502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.087031] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1228.094236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1228.101474] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1228.109748] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1228.121551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1228.131526] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1228.148122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.159314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.169288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.179080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.188704] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1228.198691] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1228.209131] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1228.216506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1228.223438] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1228.231655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1228.454283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1228.461639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1228.476061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1228.482812] batman_adv: batadv0: Removing interface: batadv_slave_1 03:23:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:37 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:37 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x5a, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xffff1f00, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:38 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c385"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:38 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:39 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:39 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c385"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xfffffdfd, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:39 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:40 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x69, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c385"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:40 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:41 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xffffff7f, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) [ 1233.297389] IPVS: ftp: loaded support on port[0] = 21 03:23:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1234.419103] chnl_net:caif_netlink_parms(): no params data found [ 1234.445466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.452051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.459764] device bridge_slave_0 entered promiscuous mode [ 1234.467579] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.474111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.481784] device bridge_slave_1 entered promiscuous mode [ 1234.606700] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1234.616506] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1234.631714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1234.639318] team0: Port device team_slave_0 added [ 1234.753004] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1234.760729] team0: Port device team_slave_1 added [ 1234.775459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.781740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.807152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.925284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.931558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.957467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.968690] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1234.980012] device bridge_slave_1 left promiscuous mode [ 1234.985647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1235.026106] device bridge_slave_0 left promiscuous mode [ 1235.031605] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.079247] device veth1_macvtap left promiscuous mode [ 1235.084591] device veth0_macvtap left promiscuous mode [ 1235.090068] device veth1_vlan left promiscuous mode [ 1235.095277] device veth0_vlan left promiscuous mode [ 1239.998333] device hsr_slave_1 left promiscuous mode [ 1240.039793] device hsr_slave_0 left promiscuous mode [ 1240.083776] team0 (unregistering): Port device team_slave_1 removed [ 1240.095292] team0 (unregistering): Port device team_slave_0 removed [ 1240.105303] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1240.150597] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1240.231369] bond0 (unregistering): Released all slaves [ 1240.269531] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1240.338211] device hsr_slave_0 entered promiscuous mode [ 1240.376352] device hsr_slave_1 entered promiscuous mode [ 1240.417852] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1240.425550] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1240.528430] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 1240.589172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1240.604795] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1240.619595] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 1240.627460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1240.639796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1240.650670] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1240.664541] 8021q: adding VLAN 0 to HW filter on device team0 [ 1240.679719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 1240.687015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1240.701056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1240.709125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.715574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1240.732153] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 1240.742110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1240.753026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1240.763779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1240.774338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.780822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.796724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 1240.812904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1240.823952] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 1240.836132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1240.853019] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 1240.861824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1240.874074] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1240.887507] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 1240.897017] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1240.908729] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1240.918037] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1240.939138] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1240.949327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1240.960430] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1240.968095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1240.976949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1240.992597] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 1241.000216] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1241.014860] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1241.023627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1241.034846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1241.050017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1241.137573] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 1241.150096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1241.217811] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 1241.229898] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 1241.237846] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 1241.254240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1241.262809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1241.274619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1241.284987] device veth0_vlan entered promiscuous mode [ 1241.299749] device veth1_vlan entered promiscuous mode [ 1241.321147] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 1241.332165] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 1241.340135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1241.349275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1241.361259] device veth0_macvtap entered promiscuous mode [ 1241.368500] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 1241.378681] device veth1_macvtap entered promiscuous mode [ 1241.385608] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 1241.396502] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 1241.408172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 1241.418185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1241.429415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.438965] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1241.449112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.458369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 1241.468378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.478727] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 1241.486078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1241.493760] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1241.501325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1241.509092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1241.517050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1241.529752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1241.539984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.549708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1241.559592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.568888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 1241.579174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1241.589549] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 1241.596605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1241.603533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1241.611984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1241.793312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1241.800237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1241.810636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1241.817549] batman_adv: batadv0: Removing interface: batadv_slave_1 03:23:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:50 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400099d}, 0x0) add_key$keyring(0x0, &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x71, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb95"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:50 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r6}, 0xffffffffffffff7c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:23:50 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xfffffdac) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x4, 0x4}, 0x1a004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)={0x98, 0x1d, 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@buf={0x78, &(0x7f0000000800)="d6c04f89d7eb48939786aeff39e9be219e921ad14b330b84a9d6dc0f3dae162160333b190d90f7a047973a0c79416261b9e60fdbcad89dec6094ec3129e1ecf40621e5530634689cefe005e8628307b6f844d04d496a354c45ad769f6b6ad26fbf02f8a96e4b95c38558ff7d2968aecb956b428cf9d1d354"}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000340)) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r5, 0x0) accept4$vsock_stream(r5, 0x0, 0x0, 0x0) close(r5) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000080)) close(0xffffffffffffffff) openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x202000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000880)={0x2a, {{0xa, 0x4e24, 0x0, @local, 0xfffffffa}}}, 0x88) r6 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x3f, 0x200000) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f00000001c0)={0x0, 0x9}) 03:23:50 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0xffffff8c, 0x0, 0x0, &(0x7f0000000640)={[{@session={'session'}}, {@umask={'umask'}}]}) 03:23:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) 03:24:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x121102, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$NBD_DO_IT(r4, 0xab03) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r8}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="7ef700f553b1cf71ffff0f00000077ce18e123ee"], 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x12604080}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="72f001b3b513c2", @ANYRES16=r10, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB]], 0x3}, 0x1, 0x0, 0x0, 0x41010}, 0x19) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x20}}, 0x0) ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x0) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/load\x00', 0x2, 0x0) [ 1391.525269] INFO: task kworker/0:1:14 blocked for more than 140 seconds. [ 1391.532209] Not tainted 4.19.98-syzkaller #0 [ 1391.537339] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.545498] kworker/0:1 D25728 14 2 0x80000000 [ 1391.551200] Workqueue: ipv6_addrconf addrconf_dad_work [ 1391.556604] Call Trace: [ 1391.559244] __schedule+0x866/0x1dc0 [ 1391.562966] ? __mutex_lock+0x721/0x1300 [ 1391.567126] ? firmware_map_remove+0x1a7/0x1a7 [ 1391.571877] ? kasan_check_read+0x11/0x20 [ 1391.576078] schedule+0x92/0x1c0 [ 1391.580423] schedule_preempt_disabled+0x13/0x20 [ 1391.585269] __mutex_lock+0x726/0x1300 [ 1391.589289] ? rtnl_lock+0x17/0x20 [ 1391.592842] ? mutex_trylock+0x1e0/0x1e0 [ 1391.596973] ? trace_hardirqs_off+0x62/0x220 [ 1391.601481] mutex_lock_nested+0x16/0x20 [ 1391.605648] ? mutex_lock_nested+0x16/0x20 [ 1391.609902] rtnl_lock+0x17/0x20 [ 1391.613294] addrconf_dad_work+0xa9/0x1110 [ 1391.617698] ? addrconf_dad_completed+0xbb0/0xbb0 [ 1391.622614] process_one_work+0x989/0x1750 [ 1391.627127] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1391.631871] ? lock_acquire+0x16f/0x3f0 [ 1391.636072] ? kasan_check_write+0x14/0x20 [ 1391.640386] ? do_raw_spin_lock+0xd7/0x250 [ 1391.644864] worker_thread+0x98/0xe40 [ 1391.648827] ? trace_hardirqs_on+0x67/0x220 [ 1391.653186] kthread+0x354/0x420 [ 1391.656636] ? process_one_work+0x1750/0x1750 [ 1391.661253] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1391.667332] ret_from_fork+0x24/0x30 [ 1391.671086] INFO: task kworker/1:0:19 blocked for more than 140 seconds. [ 1391.678030] Not tainted 4.19.98-syzkaller #0 [ 1391.682966] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.691220] kworker/1:0 D25696 19 2 0x80000000 [ 1391.696985] Workqueue: ipv6_addrconf addrconf_dad_work [ 1391.702322] Call Trace: [ 1391.704920] __schedule+0x866/0x1dc0 [ 1391.708742] ? __mutex_lock+0x721/0x1300 [ 1391.712826] ? firmware_map_remove+0x1a7/0x1a7 [ 1391.717522] ? kasan_check_read+0x11/0x20 [ 1391.721800] schedule+0x92/0x1c0 [ 1391.725265] schedule_preempt_disabled+0x13/0x20 [ 1391.730349] __mutex_lock+0x726/0x1300 [ 1391.734252] ? rtnl_lock+0x17/0x20 [ 1391.737954] ? mutex_trylock+0x1e0/0x1e0 [ 1391.742051] ? trace_hardirqs_off+0x62/0x220 [ 1391.746635] mutex_lock_nested+0x16/0x20 [ 1391.750715] ? mutex_lock_nested+0x16/0x20 [ 1391.754950] rtnl_lock+0x17/0x20 [ 1391.758376] addrconf_dad_work+0xa9/0x1110 [ 1391.762674] ? addrconf_dad_completed+0xbb0/0xbb0 [ 1391.767915] process_one_work+0x989/0x1750 [ 1391.772205] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1391.776982] ? lock_acquire+0x16f/0x3f0 [ 1391.781045] ? kasan_check_write+0x14/0x20 [ 1391.785467] ? do_raw_spin_lock+0xd7/0x250 [ 1391.789725] worker_thread+0x98/0xe40 [ 1391.793575] kthread+0x354/0x420 [ 1391.797074] ? process_one_work+0x1750/0x1750 [ 1391.801627] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1391.807269] ret_from_fork+0x24/0x30 [ 1391.811118] INFO: task kworker/1:4:8214 blocked for more than 140 seconds. [ 1391.818224] Not tainted 4.19.98-syzkaller #0 [ 1391.823162] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.831480] kworker/1:4 D25152 8214 2 0x80000000 [ 1391.837304] Workqueue: events linkwatch_event [ 1391.841804] Call Trace: [ 1391.844402] __schedule+0x866/0x1dc0 [ 1391.848224] ? firmware_map_remove+0x1a7/0x1a7 [ 1391.852851] ? kasan_check_read+0x11/0x20 [ 1391.857092] schedule+0x92/0x1c0 [ 1391.860471] schedule_preempt_disabled+0x13/0x20 [ 1391.865318] __mutex_lock+0x726/0x1300 [ 1391.869217] ? rtnl_lock+0x17/0x20 [ 1391.872835] ? mutex_trylock+0x1e0/0x1e0 [ 1391.876979] ? trace_hardirqs_on_caller+0x6a/0x220 [ 1391.882017] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1391.887002] ? __lock_is_held+0xb6/0x140 [ 1391.891097] mutex_lock_nested+0x16/0x20 [ 1391.895216] ? mutex_lock_nested+0x16/0x20 [ 1391.899472] rtnl_lock+0x17/0x20 [ 1391.902831] linkwatch_event+0xf/0x70 [ 1391.906712] process_one_work+0x989/0x1750 [ 1391.910979] ? pwq_dec_nr_in_flight+0x320/0x320 [ 1391.915734] ? lock_acquire+0x16f/0x3f0 [ 1391.919722] ? kasan_check_write+0x14/0x20 [ 1391.923963] ? do_raw_spin_lock+0xd7/0x250 [ 1391.928330] worker_thread+0x98/0xe40 [ 1391.932692] kthread+0x354/0x420 [ 1391.936138] ? process_one_work+0x1750/0x1750 [ 1391.940700] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1391.946349] ret_from_fork+0x24/0x30 [ 1391.950153] INFO: task syz-executor.4:17922 blocked for more than 140 seconds. [ 1391.957730] Not tainted 4.19.98-syzkaller #0 [ 1391.962758] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1391.970816] syz-executor.4 D24056 17922 1 0x80000002 [ 1391.976507] Call Trace: [ 1391.979105] __schedule+0x866/0x1dc0 [ 1391.982830] ? firmware_map_remove+0x1a7/0x1a7 [ 1391.987520] ? autoremove_wake_function+0x160/0x160 [ 1391.992636] schedule+0x92/0x1c0 [ 1391.996082] _synchronize_rcu_expedited+0x6b6/0x7f0 [ 1392.001265] ? rcu_report_exp_cpu_mult+0xa0/0xa0 [ 1392.006119] ? sync_rcu_exp_select_cpus+0x830/0x830 [ 1392.011154] ? finish_wait+0x260/0x260 [ 1392.015118] ? _raw_spin_unlock_irq+0x5e/0x90 [ 1392.019637] ? __flush_work+0x4b7/0x870 [ 1392.023615] ? insert_work+0x3a0/0x3a0 [ 1392.027618] ? __lock_is_held+0xb6/0x140 [ 1392.033288] ? __lock_is_held+0xb6/0x140 [ 1392.038348] synchronize_rcu_expedited+0x35/0xb0 [ 1392.043211] synchronize_net+0x3b/0x60 [ 1392.047183] rollback_registered_many+0x57a/0xda0 [ 1392.052141] ? generic_xdp_install+0x3d0/0x3d0 [ 1392.056791] ? mark_held_locks+0xb1/0x100 [ 1392.061053] ? queue_delayed_work_on+0xe6/0x200 [ 1392.065811] ? linkwatch_schedule_work+0x13c/0x170 [ 1392.070790] ? queue_delayed_work_on+0xe6/0x200 [ 1392.075570] ? lockdep_hardirqs_on+0x415/0x5d0 [ 1392.080189] rollback_registered+0x109/0x1d0 [ 1392.086248] ? rollback_registered_many+0xda0/0xda0 [ 1392.091331] unregister_netdevice_queue+0x1ee/0x2c0 [ 1392.096542] __tun_detach+0xd9b/0x1050 [ 1392.100442] ? tun_chr_ioctl+0x40/0x40 [ 1392.104314] tun_chr_close+0xe0/0x180 [ 1392.108206] __fput+0x2dd/0x8b0 [ 1392.111501] ____fput+0x16/0x20 [ 1392.114773] task_work_run+0x145/0x1c0 [ 1392.118744] do_exit+0xc1f/0x30d0 [ 1392.122257] ? vfs_write+0x121/0x560 [ 1392.126049] ? mm_update_next_owner+0x660/0x660 [ 1392.130780] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.136370] ? ksys_write+0x1f1/0x2d0 [ 1392.140183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1392.144941] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1392.149798] do_group_exit+0x135/0x370 [ 1392.154307] __x64_sys_exit_group+0x44/0x50 [ 1392.158721] do_syscall_64+0xfd/0x620 [ 1392.162538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1392.168226] RIP: 0033:0x45b349 [ 1392.171444] Code: Bad RIP value. [ 1392.174792] RSP: 002b:00007ffefedc1d68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1392.182639] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000045b349 [ 1392.190138] RDX: 0000000000414e00 RSI: 0000000000a770d0 RDI: 0000000000000000 [ 1392.197490] RBP: 00000000004c01dc R08: 000000000000000c R09: 0000000000000000 [ 1392.204764] R10: 0000000001bdd940 R11: 0000000000000246 R12: 00007ffefedc3010 [ 1392.212153] R13: 0000000001be6980 R14: 0000000000000000 R15: 00007ffefedc40a0 [ 1392.219519] INFO: task syz-executor.5:17984 blocked for more than 140 seconds. [ 1392.226979] Not tainted 4.19.98-syzkaller #0 [ 1392.231902] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1392.239963] syz-executor.5 D29464 17984 8203 0x00000004 [ 1392.245669] Call Trace: [ 1392.248267] __schedule+0x866/0x1dc0 [ 1392.251985] ? __mutex_lock+0x721/0x1300 [ 1392.256142] ? firmware_map_remove+0x1a7/0x1a7 [ 1392.260734] ? kasan_check_read+0x11/0x20 [ 1392.264874] schedule+0x92/0x1c0 [ 1392.268366] schedule_preempt_disabled+0x13/0x20 [ 1392.273135] __mutex_lock+0x726/0x1300 [ 1392.277080] ? rtnl_lock+0x17/0x20 [ 1392.280630] ? mutex_trylock+0x1e0/0x1e0 [ 1392.284697] ? lock_downgrade+0x880/0x880 [ 1392.288961] mutex_lock_nested+0x16/0x20 [ 1392.293024] ? mutex_lock_nested+0x16/0x20 [ 1392.297366] rtnl_lock+0x17/0x20 [ 1392.300795] sock_do_ioctl+0x24e/0x2f0 [ 1392.304674] ? compat_ifr_data_ioctl+0x160/0x160 [ 1392.309533] ? mark_held_locks+0x100/0x100 [ 1392.313786] sock_ioctl+0x325/0x610 [ 1392.317491] ? dlci_ioctl_set+0x40/0x40 [ 1392.321591] ? __fget+0x340/0x540 [ 1392.325152] ? __might_sleep+0x95/0x190 [ 1392.329138] ? dlci_ioctl_set+0x40/0x40 [ 1392.333203] do_vfs_ioctl+0xd5f/0x1380 [ 1392.337175] ? selinux_file_ioctl+0x46c/0x5d0 [ 1392.341684] ? selinux_file_ioctl+0x125/0x5d0 [ 1392.346395] ? ioctl_preallocate+0x210/0x210 [ 1392.350956] ? selinux_file_mprotect+0x620/0x620 [ 1392.355803] ? iterate_fd+0x360/0x360 [ 1392.359738] ? nsecs_to_jiffies+0x30/0x30 [ 1392.363942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.369670] ? security_file_ioctl+0x8d/0xc0 [ 1392.374097] ksys_ioctl+0xab/0xd0 [ 1392.377664] __x64_sys_ioctl+0x73/0xb0 [ 1392.382090] do_syscall_64+0xfd/0x620 [ 1392.385983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1392.391182] RIP: 0033:0x45b349 [ 1392.394370] Code: Bad RIP value. [ 1392.397791] RSP: 002b:00007f0175353c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.405698] RAX: ffffffffffffffda RBX: 00007f01753546d4 RCX: 000000000045b349 [ 1392.412968] RDX: 0000000020000200 RSI: 0000000000008912 RDI: 0000000000000007 [ 1392.420323] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1392.427780] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1392.435134] R13: 000000000000065a R14: 00000000004c7e7b R15: 000000000075bfd4 [ 1392.442456] INFO: task syz-executor.2:17996 blocked for more than 140 seconds. [ 1392.450081] Not tainted 4.19.98-syzkaller #0 [ 1392.455060] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1392.463128] syz-executor.2 D27352 17996 16861 0x00000004 [ 1392.469408] Call Trace: [ 1392.472013] __schedule+0x866/0x1dc0 [ 1392.475775] ? __mutex_lock+0x721/0x1300 [ 1392.479855] ? firmware_map_remove+0x1a7/0x1a7 [ 1392.484439] ? kasan_check_read+0x11/0x20 [ 1392.488694] schedule+0x92/0x1c0 [ 1392.492066] schedule_preempt_disabled+0x13/0x20 [ 1392.496917] __mutex_lock+0x726/0x1300 [ 1392.500929] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 1392.505469] ? mutex_trylock+0x1e0/0x1e0 [ 1392.509542] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1392.514044] ? lock_downgrade+0x880/0x880 [ 1392.518285] mutex_lock_nested+0x16/0x20 [ 1392.522363] ? mutex_lock_nested+0x16/0x20 [ 1392.526732] rtnetlink_rcv_msg+0x40a/0xb00 [ 1392.531008] ? rtnetlink_put_metrics+0x560/0x560 [ 1392.535854] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 [ 1392.540970] ? rcu_read_unlock_special+0x679/0xea0 [ 1392.546079] ? netlink_deliver_tap+0x22d/0xc20 [ 1392.550673] ? find_held_lock+0x35/0x130 [ 1392.555320] netlink_rcv_skb+0x17d/0x460 [ 1392.559417] ? rtnetlink_put_metrics+0x560/0x560 [ 1392.564168] ? netlink_ack+0xb30/0xb30 [ 1392.568165] ? netlink_deliver_tap+0x254/0xc20 [ 1392.572768] rtnetlink_rcv+0x1d/0x30 [ 1392.576539] netlink_unicast+0x53a/0x730 [ 1392.580786] ? netlink_attachskb+0x770/0x770 [ 1392.585304] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.590859] netlink_sendmsg+0x8ae/0xd70 [ 1392.595166] ? netlink_unicast+0x730/0x730 [ 1392.599429] ? selinux_socket_sendmsg+0x36/0x40 [ 1392.604176] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.610098] ? security_socket_sendmsg+0x8d/0xc0 [ 1392.614986] ? netlink_unicast+0x730/0x730 [ 1392.619325] sock_sendmsg+0xd7/0x130 [ 1392.623043] ___sys_sendmsg+0x803/0x920 [ 1392.627119] ? copy_msghdr_from_user+0x430/0x430 [ 1392.631894] ? lock_downgrade+0x880/0x880 [ 1392.636927] ? kasan_check_read+0x11/0x20 [ 1392.641221] ? __fget+0x367/0x540 [ 1392.644673] ? iterate_fd+0x360/0x360 [ 1392.649148] ? lock_downgrade+0x880/0x880 [ 1392.653312] ? __fget_light+0x1a9/0x230 [ 1392.657501] ? __fdget+0x1b/0x20 [ 1392.660895] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1392.666543] __sys_sendmsg+0x105/0x1d0 [ 1392.670441] ? __ia32_sys_shutdown+0x80/0x80 [ 1392.674890] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1392.679772] ? do_syscall_64+0x26/0x620 [ 1392.683881] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1392.689428] ? do_syscall_64+0x26/0x620 [ 1392.693428] __x64_sys_sendmsg+0x78/0xb0 [ 1392.697703] do_syscall_64+0xfd/0x620 [ 1392.701515] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1392.706888] RIP: 0033:0x45b349 [ 1392.710092] Code: Bad RIP value. [ 1392.713453] RSP: 002b:00007f158d051c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1392.721255] RAX: ffffffffffffffda RBX: 00007f158d0526d4 RCX: 000000000045b349 [ 1392.728765] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000006 [ 1392.736115] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 1392.743396] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1392.750878] R13: 000000000000099e R14: 00000000004cb152 R15: 000000000075c1cc [ 1392.758257] INFO: task syz-executor.1:18003 blocked for more than 140 seconds. [ 1392.765721] Not tainted 4.19.98-syzkaller #0 [ 1392.770645] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1392.778696] syz-executor.1 D29816 18003 8192 0x00000004 [ 1392.784351] Call Trace: [ 1392.787040] __schedule+0x866/0x1dc0 [ 1392.790860] ? __mutex_lock+0x721/0x1300 [ 1392.794961] ? firmware_map_remove+0x1a7/0x1a7 [ 1392.799732] ? kasan_check_read+0x11/0x20 [ 1392.803921] schedule+0x92/0x1c0 [ 1392.807397] schedule_preempt_disabled+0x13/0x20 [ 1392.812237] __mutex_lock+0x726/0x1300 [ 1392.817004] ? rtnl_lock+0x17/0x20 [ 1392.820584] ? mutex_trylock+0x1e0/0x1e0 [ 1392.824669] ? lock_downgrade+0x880/0x880 [ 1392.828943] mutex_lock_nested+0x16/0x20 [ 1392.833025] ? mutex_lock_nested+0x16/0x20 [ 1392.837444] rtnl_lock+0x17/0x20 [ 1392.840865] sock_do_ioctl+0x24e/0x2f0 [ 1392.844969] ? compat_ifr_data_ioctl+0x160/0x160 [ 1392.849853] ? mark_held_locks+0x100/0x100 [ 1392.854323] sock_ioctl+0x325/0x610 [ 1392.858100] ? dlci_ioctl_set+0x40/0x40 [ 1392.862140] ? __fget+0x340/0x540 [ 1392.865693] ? __might_sleep+0x95/0x190 [ 1392.869687] ? dlci_ioctl_set+0x40/0x40 [ 1392.873672] do_vfs_ioctl+0xd5f/0x1380 [ 1392.877621] ? selinux_file_ioctl+0x46c/0x5d0 [ 1392.882136] ? selinux_file_ioctl+0x125/0x5d0 [ 1392.886848] ? ioctl_preallocate+0x210/0x210 [ 1392.891301] ? selinux_file_mprotect+0x620/0x620 [ 1392.897803] ? iterate_fd+0x360/0x360 [ 1392.901673] ? nsecs_to_jiffies+0x30/0x30 [ 1392.905936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1392.911703] ? security_file_ioctl+0x8d/0xc0 [ 1392.916193] ksys_ioctl+0xab/0xd0 [ 1392.919669] __x64_sys_ioctl+0x73/0xb0 [ 1392.923581] do_syscall_64+0xfd/0x620 [ 1392.927502] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1392.932706] RIP: 0033:0x45b349 [ 1392.935978] Code: Bad RIP value. [ 1392.939353] RSP: 002b:00007fc7e9563c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1392.947206] RAX: ffffffffffffffda RBX: 00007fc7e95646d4 RCX: 000000000045b349 [ 1392.954532] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000003 [ 1392.961911] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 1392.969281] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1392.976824] R13: 00000000000003ec R14: 00000000004c5429 R15: 000000000075c07c [ 1392.984337] INFO: task syz-executor.3:17986 blocked for more than 140 seconds. [ 1392.991877] Not tainted 4.19.98-syzkaller #0 [ 1392.996945] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1393.004914] syz-executor.3 D29464 17986 10105 0x00000004 [ 1393.010659] Call Trace: [ 1393.013320] __schedule+0x866/0x1dc0 [ 1393.017161] ? __mutex_lock+0x721/0x1300 [ 1393.021247] ? firmware_map_remove+0x1a7/0x1a7 [ 1393.026812] ? kasan_check_read+0x11/0x20 [ 1393.031065] schedule+0x92/0x1c0 [ 1393.034434] schedule_preempt_disabled+0x13/0x20 [ 1393.039288] __mutex_lock+0x726/0x1300 [ 1393.043209] ? rtnl_lock+0x17/0x20 [ 1393.046843] ? mutex_trylock+0x1e0/0x1e0 [ 1393.050921] ? lock_downgrade+0x880/0x880 [ 1393.055146] mutex_lock_nested+0x16/0x20 [ 1393.059220] ? mutex_lock_nested+0x16/0x20 [ 1393.063458] rtnl_lock+0x17/0x20 [ 1393.066933] sock_do_ioctl+0x24e/0x2f0 [ 1393.070851] ? compat_ifr_data_ioctl+0x160/0x160 [ 1393.075691] ? mark_held_locks+0x100/0x100 [ 1393.079949] sock_ioctl+0x325/0x610 [ 1393.083606] ? dlci_ioctl_set+0x40/0x40 [ 1393.087699] ? __fget+0x340/0x540 [ 1393.091185] ? __might_sleep+0x95/0x190 [ 1393.095234] ? dlci_ioctl_set+0x40/0x40 [ 1393.099217] do_vfs_ioctl+0xd5f/0x1380 [ 1393.103111] ? selinux_file_ioctl+0x46c/0x5d0 [ 1393.107700] ? selinux_file_ioctl+0x125/0x5d0 [ 1393.112214] ? ioctl_preallocate+0x210/0x210 [ 1393.116704] ? selinux_file_mprotect+0x620/0x620 [ 1393.121472] ? iterate_fd+0x360/0x360 [ 1393.125510] ? nsecs_to_jiffies+0x30/0x30 [ 1393.129745] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.135347] ? security_file_ioctl+0x8d/0xc0 [ 1393.139955] ksys_ioctl+0xab/0xd0 [ 1393.143411] __x64_sys_ioctl+0x73/0xb0 [ 1393.147404] do_syscall_64+0xfd/0x620 [ 1393.151217] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1393.156493] RIP: 0033:0x45b349 [ 1393.159702] Code: Bad RIP value. [ 1393.163081] RSP: 002b:00007f7a17bc7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1393.171057] RAX: ffffffffffffffda RBX: 00007f7a17bc86d4 RCX: 000000000045b349 [ 1393.178507] RDX: 0000000020000200 RSI: 0000000000008912 RDI: 0000000000000007 [ 1393.185868] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 1393.193149] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1393.200470] R13: 000000000000065a R14: 00000000004c7e7b R15: 000000000075bfd4 [ 1393.207968] INFO: task syz-executor.0:17995 blocked for more than 140 seconds. [ 1393.215570] Not tainted 4.19.98-syzkaller #0 [ 1393.220493] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1393.228542] syz-executor.0 D27352 17995 14306 0x00000004 [ 1393.234185] Call Trace: [ 1393.236849] __schedule+0x866/0x1dc0 [ 1393.240573] ? __mutex_lock+0x721/0x1300 [ 1393.244771] ? firmware_map_remove+0x1a7/0x1a7 [ 1393.249448] ? kasan_check_read+0x11/0x20 [ 1393.253603] schedule+0x92/0x1c0 [ 1393.257046] schedule_preempt_disabled+0x13/0x20 [ 1393.261813] __mutex_lock+0x726/0x1300 [ 1393.265811] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 1393.270230] ? mutex_trylock+0x1e0/0x1e0 [ 1393.274337] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 1393.278919] ? lock_downgrade+0x880/0x880 [ 1393.283092] mutex_lock_nested+0x16/0x20 [ 1393.287302] ? mutex_lock_nested+0x16/0x20 [ 1393.291562] rtnetlink_rcv_msg+0x40a/0xb00 [ 1393.295889] ? rtnetlink_put_metrics+0x560/0x560 [ 1393.300682] ? netdev_pick_tx+0x300/0x300 [ 1393.304820] ? netlink_deliver_tap+0x22d/0xc20 [ 1393.309573] ? find_held_lock+0x35/0x130 [ 1393.313755] netlink_rcv_skb+0x17d/0x460 [ 1393.317882] ? rtnetlink_put_metrics+0x560/0x560 [ 1393.322655] ? netlink_ack+0xb30/0xb30 [ 1393.326647] ? kasan_check_read+0x11/0x20 [ 1393.330818] ? netlink_deliver_tap+0x254/0xc20 [ 1393.335491] rtnetlink_rcv+0x1d/0x30 [ 1393.339252] netlink_unicast+0x53a/0x730 [ 1393.343369] ? netlink_attachskb+0x770/0x770 [ 1393.347892] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.353560] netlink_sendmsg+0x8ae/0xd70 [ 1393.357698] ? netlink_unicast+0x730/0x730 [ 1393.361991] ? selinux_socket_sendmsg+0x36/0x40 [ 1393.366737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1393.372286] ? security_socket_sendmsg+0x8d/0xc0 [ 1393.377115] ? netlink_unicast+0x730/0x730 [ 1393.381374] sock_sendmsg+0xd7/0x130 [ 1393.385166] ___sys_sendmsg+0x803/0x920 [ 1393.389150] ? copy_msghdr_from_user+0x430/0x430 [ 1393.394202] ? lock_downgrade+0x880/0x880 [ 1393.398585] ? kasan_check_read+0x11/0x20 [ 1393.402744] ? __fget+0x367/0x540 [ 1393.406288] ? iterate_fd+0x360/0x360 [ 1393.410217] ? lock_downgrade+0x880/0x880 [ 1393.414371] ? __fget_light+0x1a9/0x230 [ 1393.418465] ? __fdget+0x1b/0x20 [ 1393.421843] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1393.428223] __sys_sendmsg+0x105/0x1d0 [ 1393.432233] ? __ia32_sys_shutdown+0x80/0x80 [ 1393.436759] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1393.441592] ? do_syscall_64+0x26/0x620 [ 1393.445867] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1393.451448] ? do_syscall_64+0x26/0x620 [ 1393.455500] __x64_sys_sendmsg+0x78/0xb0 [ 1393.459579] do_syscall_64+0xfd/0x620 [ 1393.463389] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1393.468654] RIP: 0033:0x45b349 [ 1393.471904] Code: Bad RIP value. [ 1393.475336] RSP: 002b:00007f1bd8767c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.483048] RAX: ffffffffffffffda RBX: 00007f1bd87686d4 RCX: 000000000045b349 [ 1393.490391] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000007 [ 1393.497729] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 1393.505153] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1393.512558] R13: 000000000000099e R14: 00000000004cb152 R15: 000000000075c1cc [ 1393.519943] [ 1393.519943] Showing all locks held in the system: [ 1393.526329] 3 locks held by kworker/0:1/14: [ 1393.530680] #0: 00000000c971f38b ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750 [ 1393.541176] #1: 00000000b5b3d71d ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1393.552277] #2: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.559645] 3 locks held by kworker/1:0/19: [ 1393.564100] #0: 00000000c971f38b ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750 [ 1393.574673] #1: 0000000009325481 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1393.585704] #2: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.593026] 1 lock held by khungtaskd/1082: [ 1393.597650] #0: 0000000058f14bc8 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 1393.606548] 1 lock held by rsyslogd/8027: [ 1393.610706] #0: 00000000d2731663 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 1393.618801] 2 locks held by getty/8149: [ 1393.622905] #0: 00000000a8cdb63a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.631292] #1: 00000000247378d9 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.640284] 2 locks held by getty/8150: [ 1393.644248] #0: 000000000bcc88b3 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.652598] #1: 000000000f1ef42d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.661536] 2 locks held by getty/8151: [ 1393.665587] #0: 000000009d17f766 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.673844] #1: 000000007ca65122 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.682936] 2 locks held by getty/8152: [ 1393.686995] #0: 00000000e6a3898a (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.695334] #1: 00000000d0d6aa6e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.704234] 2 locks held by getty/8153: [ 1393.708349] #0: 00000000e343f153 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.716657] #1: 000000000c551212 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.725616] 2 locks held by getty/8154: [ 1393.729699] #0: 00000000daa894c1 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.738018] #1: 0000000043d443bd (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.746993] 2 locks held by getty/8155: [ 1393.750977] #0: 000000005aa88fbf (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 1393.759279] #1: 000000000eb9d3d3 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 1393.768756] 3 locks held by kworker/1:4/8214: [ 1393.773261] #0: 00000000a3ccda04 ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 [ 1393.782675] #1: 0000000099b281a5 ((linkwatch_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 [ 1393.792011] #2: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.799492] 2 locks held by syz-executor.5/9358: [ 1393.804249] #0: 000000008fcfc78e (&sb->s_type->i_mutex_key#11){+.+.}, at: __sock_release+0x89/0x2a0 [ 1393.813635] #1: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.821009] 1 lock held by syz-executor.4/17922: [ 1393.825933] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.833253] 1 lock held by syz-executor.5/17984: [ 1393.838119] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.845482] 1 lock held by syz-executor.2/17996: [ 1393.850221] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1393.858493] 1 lock held by syz-executor.1/18003: [ 1393.863250] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.870764] 1 lock held by syz-executor.3/17986: [ 1393.875565] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 1393.883208] 1 lock held by syz-executor.0/17995: [ 1393.888082] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1393.896306] 1 lock held by syz-executor.4/18005: [ 1393.901046] #0: 000000003d034d0a (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 1393.909308] [ 1393.911021] ============================================= [ 1393.911021] [ 1393.918097] NMI backtrace for cpu 1 [ 1393.921739] CPU: 1 PID: 1082 Comm: khungtaskd Not tainted 4.19.98-syzkaller #0 [ 1393.929129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1393.938492] Call Trace: [ 1393.941093] dump_stack+0x197/0x210 [ 1393.944712] nmi_cpu_backtrace.cold+0x63/0xa4 [ 1393.949217] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 1393.954136] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 1393.959414] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1393.964641] watchdog+0x9df/0xee0 [ 1393.968139] kthread+0x354/0x420 [ 1393.971509] ? reset_hung_task_detector+0x30/0x30 [ 1393.976347] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1393.981885] ret_from_fork+0x24/0x30 [ 1393.985734] Sending NMI from CPU 1 to CPUs 0: [ 1393.990295] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 1393.991242] Kernel panic - not syncing: hung_task: blocked tasks [ 1394.004015] CPU: 1 PID: 1082 Comm: khungtaskd Not tainted 4.19.98-syzkaller #0 [ 1394.011467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1394.020963] Call Trace: [ 1394.023599] dump_stack+0x197/0x210 [ 1394.027223] panic+0x26a/0x50e [ 1394.030417] ? __warn_printk+0xf3/0xf3 [ 1394.034310] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1394.039330] ? printk_safe_flush+0xf2/0x140 [ 1394.043651] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1394.049197] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 1394.054195] ? nmi_trigger_cpumask_backtrace+0x16e/0x1f8 [ 1394.059658] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 1394.065106] watchdog+0x9f0/0xee0 [ 1394.068553] kthread+0x354/0x420 [ 1394.071924] ? reset_hung_task_detector+0x30/0x30 [ 1394.076809] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 1394.082354] ret_from_fork+0x24/0x30 [ 1394.088089] Kernel Offset: disabled [ 1394.091774] Rebooting in 86400 seconds..