0)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 18:11:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000192b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:42 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x4000, 0x0}) 18:11:42 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0}) 18:11:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000800)=""/4096, 0x1000) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') open(&(0x7f00000001c0)='./file0/file0\x00', 0x100, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:11:42 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0}) 18:11:42 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0xff00, 0x0}) 18:11:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000192d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 18:11:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:43 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0}) 18:11:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000240)={0x57, "28d30cf5d0e10fde742f4b60629e16cab38027b573f5aa18f9784e3d74bb6eec19c2a9ae2a1676672142a3b22b06bc2f686ace215dbcefb1ca05ef0ea54ab2a1f07befc32445e89b0bc31e070c2d86e291560df145603bae001b59f81f38afa6c39ab95f8412bacebff472efcb1b115ff8281bd492a709c79c91a2f36aeb884e"}) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2dce56647320"], 0x6) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) prctl$PR_SET_PTRACER(0x59616d61, r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0xf6f9) sendfile(r1, r0, 0x0, 0x80000000) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 18:11:43 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x1000000, 0x0}) 18:11:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}) 18:11:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000192f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:43 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0}) 18:11:43 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x2000000, 0x0}) 18:11:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}) 18:11:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001931000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:43 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:11:43 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0}) [ 2037.111518][T28525] IPVS: ftp: loaded support on port[0] = 21 [ 2037.319712][T28525] chnl_net:caif_netlink_parms(): no params data found [ 2037.422993][T28525] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.430206][T28525] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.438425][T28525] device bridge_slave_0 entered promiscuous mode [ 2037.446121][T28525] bridge0: port 2(bridge_slave_1) entered blocking state [ 2037.453449][T28525] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.461664][T28525] device bridge_slave_1 entered promiscuous mode [ 2037.556864][T28525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2037.567924][T28525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2037.587562][T28525] team0: Port device team_slave_0 added [ 2037.594793][T28525] team0: Port device team_slave_1 added [ 2037.601539][ T5053] device bridge_slave_1 left promiscuous mode [ 2037.607969][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2037.649363][ T5053] device bridge_slave_0 left promiscuous mode [ 2037.655638][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.440041][ T5053] device hsr_slave_1 left promiscuous mode [ 2039.481511][ T5053] device hsr_slave_0 left promiscuous mode [ 2039.533477][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2039.546448][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2039.558303][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2039.602607][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2039.696839][ T5053] bond0 (unregistering): Released all slaves [ 2039.851322][T28525] device hsr_slave_0 entered promiscuous mode [ 2039.888468][T28525] device hsr_slave_1 entered promiscuous mode [ 2039.982582][T28525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2039.996943][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2040.006915][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2040.017097][T28525] 8021q: adding VLAN 0 to HW filter on device team0 [ 2040.079864][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2040.088843][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2040.097203][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2040.104295][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2040.112325][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2040.121111][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2040.131068][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2040.138119][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2040.145967][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2040.156642][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2040.171398][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2040.186154][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2040.196180][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2040.213842][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2040.222379][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2040.231620][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2040.247284][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2040.256327][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2040.277538][T28525] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2040.296865][T28525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2040.306749][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2040.322617][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2040.353048][T28525] 8021q: adding VLAN 0 to HW filter on device batadv0 18:11:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 18:11:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001933000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:49 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x3000000, 0x0}) 18:11:49 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0}) 18:11:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f00000001c0)=0x14) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:11:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 18:11:49 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x4000000, 0x0}) 18:11:49 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0}) 18:11:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001935000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001937000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:49 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0}) 18:11:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:49 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 18:11:49 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x5000000, 0x0}) 18:11:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001939000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:49 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0}) 18:11:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') mq_timedreceive(r1, &(0x7f0000000040)=""/16, 0x10, 0x400, &(0x7f00000001c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r4, r0, 0x0, 0x2000080000000) 18:11:50 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000193b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x6000000, 0x0}) 18:11:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 18:11:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000193d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:50 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x400000000000) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x4c100) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffff42, 0x0, 0x0}) 18:11:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000193f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x7000000, 0x0}) 18:11:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 18:11:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001941000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x81) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:11:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup(r0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000080)=0x24002, 0x4) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x1) write$P9_RATTACH(r3, &(0x7f0000000040)={0x14, 0x69, 0x1}, 0x14) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x8000000, 0x0}) 18:11:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 18:11:51 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff80000001, 0x40000) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x8000) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f00000000c0)=r2) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2044.240889][T28652] IPVS: ftp: loaded support on port[0] = 21 [ 2044.371447][T28652] chnl_net:caif_netlink_parms(): no params data found [ 2044.467416][T28652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.474716][T28652] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.482788][T28652] device bridge_slave_0 entered promiscuous mode [ 2044.492284][T28652] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.499518][T28652] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.507083][T28652] device bridge_slave_1 entered promiscuous mode [ 2044.514265][ T5053] device bridge_slave_1 left promiscuous mode [ 2044.522719][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.569297][ T5053] device bridge_slave_0 left promiscuous mode [ 2044.575502][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.381655][ T5053] device hsr_slave_1 left promiscuous mode [ 2046.432009][ T5053] device hsr_slave_0 left promiscuous mode [ 2046.512102][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2046.525936][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2046.537457][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2046.575926][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2046.666869][ T5053] bond0 (unregistering): Released all slaves [ 2046.814470][T28652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2046.825095][T28652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2046.847104][T28652] team0: Port device team_slave_0 added [ 2046.854686][T28652] team0: Port device team_slave_1 added [ 2046.940135][T28652] device hsr_slave_0 entered promiscuous mode [ 2047.018725][T28652] device hsr_slave_1 entered promiscuous mode [ 2047.110851][T28652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2047.124729][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2047.135986][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2047.143801][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2047.200942][T28652] 8021q: adding VLAN 0 to HW filter on device team0 [ 2047.213245][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2047.222316][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2047.231560][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.238673][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2047.260927][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2047.269349][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2047.277988][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2047.286618][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.293732][T14495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2047.304901][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2047.314649][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2047.334649][T28652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2047.345731][T28652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2047.360730][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2047.369872][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2047.385445][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2047.396266][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2047.422475][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2047.437202][T28652] 8021q: adding VLAN 0 to HW filter on device batadv0 18:11:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001943000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 18:11:56 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x3f000000, 0x0}) 18:11:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:11:56 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x4, 0x2000) r1 = syz_open_dev$usb(&(0x7f0000000740)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000780)={0xd, 0x200, {0x52, 0xf10, 0x1000, {0x4, 0x9}, {0x0, 0x9}, @ramp={0x8, 0x3b, {0x3d, 0x1}}}, {0x53, 0x0, 0x526a, {0x7, 0x7}, {0x3, 0x4}, @ramp={0x800, 0x1, {0xfffffffffffffffa, 0x7f00000, 0x401, 0xa01}}}}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) r2 = syz_open_dev$binder(0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) getresgid(&(0x7f00000001c0), &(0x7f0000001180)=0x0, &(0x7f0000000280)) ioctl$sock_ax25_SIOCADDRT(r4, 0x890b, &(0x7f0000001100)={@null, @bcast, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000800)=r0) quotactl(0x6, &(0x7f0000000640)='./file0\x00', r6, &(0x7f0000000680)="b937e85ec7ce445f074492bc610aa76f48171beb9682e45bd7f79914d125d9a9db5ea09a2e9227de7854a2021e99f224769072dd97c43df4334a04432ee20af888d92a26e861a89b4ff271d8046ecc8b412e0b3250462b12b26824c353037ec9b4944a3b2b1b069d5971b993d049807ff704899ffce3a24e8747a0a6e01a58cde94469959dfe6c7d96823708ac6f09c8ef") ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000d00)={"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"}) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000001280)=""/140) write$FUSE_ENTRY(r3, &(0x7f00000002c0)={0x90, 0x0, 0x3, {0x6, 0x3, 0x7, 0x7, 0x4, 0xf0d4, {0x4, 0xa650, 0x6, 0x81, 0x4, 0x1, 0xccb, 0x6, 0x1, 0x5, 0x3f, r6, r7, 0x8001, 0x1}}}, 0x90) sendmsg$xdp(r0, &(0x7f0000000cc0)={&(0x7f0000000840)={0x2c, 0x4, r5, 0xb}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000880)="27cc792be277112ef87a312bb59b4338bdf388d75ccb17be78d17dae5821d3082c148084d51bd51ff2b23bec81c4432042d2bfc1e1908cf4e43d48255eaf6910791dc6b1230461e63f61f4778b1c508b0444e5f5071cfc8a66c376bebaf64fa507fd9941", 0x160}, {&(0x7f0000000900)="56b1e97c2596a1d3d48be6d106d26ae1f624084db1d4e7690bfae0d537b0ed8c98361c4a24ed7b3a3b698b2b09f49f267211b449774a68f7adb97c2e7d1b768a68285254efea8f8380fbafafd649c813def8b812648867", 0x57}, {&(0x7f0000000980)="303099fb9154da042a5c71d86d88fbf4dd563ee523f7847f99bfd2c5b52ea7bc4f28ec08572060414f8d2f7d16a6648bc9956a20b388ee7801150e687e816037fbfb8e23f585b2562489777de6a602fe555ea00a5accb3311714244f2c2bb51555b8c6cc8f161b02a7b488a7e0fbfe2f14752820250d46f8f7200878c2f34e5293", 0x81}, {&(0x7f0000000a40)="93f9b0b83840c7ee1343b34ba539cc4e7c751b7a0fab74f78221d92a002787448f639d3146ddcf8ca33ab83aa5fc05beac128e5e5e5886ed8527daeeac89a13fcd17acdf9383d2fa79a7522783fe8d984304a662d632950c759fda9f2ed30930de99d50f2a1eb2bed4d806158f97871da11aaa0927ab4079e3f07c32ae5fc540e8c72534950417c9cd2b2bf8a639a7f0e2e01324a8c1ad552bb741b8f771e0316144fc0ed8fce704166e3d192f6956ff28bc0a675742bcaa86c3b0ca3e3edb1ad7c65e971f2a9193d82f0a98c1727b3805488a7f", 0xd4}, {&(0x7f0000000b40)="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", 0xff}], 0x5, 0x0, 0x0, 0x41}, 0x84) setsockopt$inet_mreqsrc(r4, 0x0, 0x26, &(0x7f0000001440)={@rand_addr=0xfffffffffffffff8, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}}, 0xc) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000003c0)={0x1, 0x8, 0x3, "fc5947eb186410bff31aea5f87aa4a3c0d824b6d6bd0866478f4d27d54ad776b", 0x3036395b}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0x100, @mcast1}}, [0xfff, 0x6, 0x2, 0x0, 0x200, 0x7fffffff, 0x401, 0x8001, 0x200, 0x3, 0x1, 0x6, 0x100, 0x0, 0x1]}, &(0x7f0000000500)=0x100) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYRES32=r8, @ANYBLOB="a10000003ec053f937735fb5e329216bba34aa28050c0054284729d874d16702e1a38131bf3ed5a06c14d9a54f8d081b98ee316cfb37b7d00dc9db263cb44adb2aee20532254775724f6f71387e204c637520411a77735b2e75d0080562b56e81fd26e065f1633f5efaebe1ee840c55d016ebd0b01487748c2674ddaf66008774ea54923d4836327e5e268bd5eeb17b7cfa7f8108511aaf9b1268fd8fbf735c810cb1d0d80"], &(0x7f0000000600)=0xa9) ioctl$VIDIOC_QUERY_DV_TIMINGS(r2, 0x80845663, &(0x7f00000011c0)={0x0, @reserved}) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000001340)={'filter\x00', 0x7b, "dc387bc276e1932a7a86acf1105c9957bce09bca7f4894cbb0cfcd579e6ba46d14e8d35bf3c6667e3f91d7992a08e0a4f17cc1a34441d25fe59892c15ddbeb9aadda1feb6229fb9b828554787004f0644ee278877aff6cde3770438cbdb2bc2f26ee7be0a0c8d7265e6de9f0d46bbe9c5ae9b153031940daa1bd11"}, &(0x7f0000001400)=0x9f) 18:11:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 18:11:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001945000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:56 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x92d331b50d47ecd5, 0x0, 0x0}) 18:11:56 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x40000000, 0x0}) 18:11:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001947000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:56 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000000000) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='syscall\x00') getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x9a, "27c597cec152670eea989367f630f5561826b42b360be4ca142d91d2ab0aaa7ea41d5b02c6afed522d1ffda3fed143b93626bba2320b3272bf3cd83509d8904feeff914fca50eec20f69d1842b159171cf010b9f36d5358e4f9e1e3237877c7d9bf8e96c2caf66f50a83e8e01822c40ddde436957a327b8df4733f85237dd0492cce79b9a6fecb8c1cfd58adc84ac6cbde86aaadfe5d1ed995d3"}, &(0x7f0000000100)=0xa2) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r2, 0x100}, 0x8) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) 18:11:57 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0xfdfdffff, 0x0}) 18:11:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001949000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:57 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001500)="98db032417fbe8ff05ee6675d5721628", 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x7, 0xfffffffffffffff9}, 'port0\x00', 0x4, 0x10000, 0x7b, 0x3ff, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x101}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") fstat(r1, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() fstat(r3, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f00000002c0)='./file0\x00', 0x81, 0x1, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x1000, 0x6}], 0x20, &(0x7f0000001440)=ANY=[@ANYBLOB='fscontext=root,fowner=', @ANYRESDEC=r5, @ANYBLOB=',smackfsront=*0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000001c0)={0x3, @bcast, r2}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 18:11:57 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0xff000000, 0x0}) 18:11:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000194b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:57 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:11:57 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x806) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x40000) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:57 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}) 18:11:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000194d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:57 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0xfffffdfd, 0x0}) 18:11:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0xfff) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:11:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x1, 0x82, 0x80000000, 0x30, 0x800, 0x4}, 0x708c}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:11:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000194f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:11:58 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) 18:11:58 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x100000000000000, 0x0}) 18:11:58 executing program 4: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/capi/capi20ncci\x00', 0x40, 0x0) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000700)=r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000500)) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000000)) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000600)={0x0, {0xd9, 0x8, 0x9, 0x1f}}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f0000000440)={{0x10001, 0xff}, 'port0\x00', 0x80, 0x43, 0x8, 0x1, 0x800, 0x3, 0x7, 0x0, 0x1, 0xff}) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x400000032affc, 0x0) r7 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) dup2(r7, r6) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000280)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$team(0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f00000002c0)={{0x4, 0x9}, 'port0\x00', 0x0, 0x800, 0x0, 0x2, 0x6, 0x20c, 0x59e, 0x0, 0x4, 0x7fff}) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x4e22, @multicast2}}}, 0x88) r8 = msgget(0x3, 0x200) msgctl$IPC_INFO(r8, 0x3, &(0x7f00000000c0)=""/122) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r9 = syz_open_dev$binder(0x0, 0x0, 0x804) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f0000000000)=0x7) mkdir(&(0x7f0000000380)='./file0\x00', 0x80) ioctl$BINDER_WRITE_READ(r9, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x15, 0x6, 0x1) 18:11:58 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001951000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2051.701544][T28788] IPVS: ftp: loaded support on port[0] = 21 [ 2051.729635][ T5053] device bridge_slave_1 left promiscuous mode [ 2051.735850][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2051.799169][ T5053] device bridge_slave_0 left promiscuous mode [ 2051.805360][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.451252][ T5053] device hsr_slave_1 left promiscuous mode [ 2053.503982][ T5053] device hsr_slave_0 left promiscuous mode [ 2053.571653][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2053.591253][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2053.602382][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2053.653870][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2053.757849][ T5053] bond0 (unregistering): Released all slaves [ 2053.927162][T28788] chnl_net:caif_netlink_parms(): no params data found [ 2053.962125][T28788] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.969325][T28788] bridge0: port 1(bridge_slave_0) entered disabled state [ 2053.977063][T28788] device bridge_slave_0 entered promiscuous mode [ 2053.984915][T28788] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.992076][T28788] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.000132][T28788] device bridge_slave_1 entered promiscuous mode [ 2054.023425][T28788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2054.034601][T28788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2054.061474][T28788] team0: Port device team_slave_0 added [ 2054.069800][T28788] team0: Port device team_slave_1 added [ 2054.130246][T28788] device hsr_slave_0 entered promiscuous mode [ 2054.188427][T28788] device hsr_slave_1 entered promiscuous mode [ 2054.305276][T28788] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.312363][T28788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2054.319789][T28788] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.326852][T28788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2054.375051][T28788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2054.396208][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2054.405892][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2054.421822][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2054.440461][T28788] 8021q: adding VLAN 0 to HW filter on device team0 [ 2054.458024][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2054.467145][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2054.474261][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2054.507885][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2054.516953][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2054.524069][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2054.555618][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2054.564923][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2054.579869][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2054.597618][T28788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2054.615099][T28788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2054.623361][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2054.637519][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2054.676257][T28788] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:03 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:03 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x200000000000000, 0x0}) 18:12:03 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xc1) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x3, 0x0, [], [{0x3, 0x80000001, 0x40, 0x100000001, 0x4, 0x100}, {0x10000, 0x8, 0x8001, 0x2, 0x53d, 0x401}], [[], [], []]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r2}) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xa) sendto$unix(r4, &(0x7f00000001c0)="1e776ecdcaa6f4759fe2b19b85a97507ec477d15dad0fe8310ced8e65ee8c45061298fd2233fa872e783c8ac23742861539faa7cbdd2d837677457179c6c9a620c378a3ece80f6", 0x47, 0x0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x5}, 0x6e) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000002c0)={0x1, 0x91, 0x668, 0x100000001, 0x6353, 0x8}) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001953000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) 18:12:03 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) 18:12:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 18:12:03 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x300000000000000, 0x0}) 18:12:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001955000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:03 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:03 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x400000000000000, 0x0}) 18:12:03 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 18:12:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001957000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x3, 0x3, 0x2c93}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000380)='physdev\x00', 0x0, r0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() r7 = getgid() fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x7, 0xa0a, [0x0, 0x20000800, 0x20000ab4, 0x20000e90], 0x0, &(0x7f00000001c0), &(0x7f0000000800)=[{0x0, '\x00', 0x0, 0x0, 0x2, [{0x5, 0x9, 0x11, 'irlan0\x00', 'ip_vti0\x00', 'irlan0\x00', '\x00', @link_local, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0xff, 0xff], 0xde, 0x15e, 0x1ae, [@time={'time\x00', 0x18, {{0x96, 0x0, 0x1f22, 0xef77, 0x7fffffff, 0x2, 0x1}}}, @pkttype={'pkttype\x00', 0x8, {{0x6}}}], [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x3}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8000, 'syz0\x00', 0x9}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0x325, 0x298}}}}, {0x9, 0x41, 0x1b, 'bond_slave_1\x00', 'veth1\x00', 'nr0\x00', 'gre0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @remote, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0xd6, [@pkttype={'pkttype\x00', 0x8, {{0x2}}}], [], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{0x11, 0x0, 0x10, 'eql\x00', 'eql\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0x0, 0x0, 0xff], @dev={[], 0x27}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xe6, 0x136, 0x166, [@mac={'mac\x00', 0x10}, @mark_m={'mark_m\x00', 0x18, {{0x4, 0x5, 0x3, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x100, 0x522}}}], @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {0xb, 0x8, 0xff, 'veth0\x00', 'lapb0\x00', 'gre0\x00', 'gretap0\x00', @empty, [0x0, 0xff, 0xff, 0xff, 0xff], @local, [0x6de52bf9fd0c808c, 0x0, 0x0, 0xff, 0xff, 0xff], 0x146, 0x1ce, 0x246, [@owner={'owner\x00', 0x18, {{r5, r6, r7, r8, 0x5, 0x1}}}, @physdev={'physdev\x00', 0x70, {{'bond_slave_0\x00', {}, 'syz_tun\x00', {}, 0x830b9ea62b136b3f, 0x4}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xfffffffffffffffe}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x7, 'syz0\x00', 0xfffffffffffffff8}}}], @common=@nflog={'nflog\x00', 0x50, {{0x4, 0x8, 0x800, 0x0, 0x0, "b149bad8563322111d769c91a7b770150d6f8f5768768c8033d933c5234d93cbca2dfb4a86fd6beddfaeef4b9d0b95d5590511d61c6fd72f7d548f26a97b7ac3"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x2, [{0x11, 0x4, 0xe9ff, 'vcan0\x00', 'sit0\x00', 'ip6gretap0\x00', 'erspan0\x00', @random="712cd3742706", [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xee, [], [@common=@dnat={'dnat\x00', 0x10, {{@local, 0xfffffffffffffffd}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x8001, 0xffffffffffffff15}}}}, {0x15, 0x22, 0x806, 'veth1_to_bridge\x00', 'vlan0\x00', 'irlan0\x00', 'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0xff], @random='n\"]t/|', [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xbe, 0xf6, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x1, 0x8, 0x7}}}], @common=@mark={'mark\x00', 0x10, {{0xffffffc0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x6, 0xffffffffffffffff, 0x1, [{0x3, 0x4, 0xe8ff, 'ip6gretap0\x00', 'ipddp0\x00', 'hsr0\x00', 'ip6gre0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff], 0xa6, 0xee, 0x136, [@realm={'realm\x00', 0x10, {{0x2ac, 0x3ff, 0x1}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"0d7b8743ecca9f5f3c82ff3e30e2cab71b1e6cb84851e677cd6227e9f5cc"}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0xffffffffffffff9b, 0xfffffffffffffffd, 0x3}}}}]}]}, 0xa82) sendfile(r1, r0, 0x0, 0x80000000) 18:12:04 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x64081, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)={'mangle\x00', 0x1000, "3d7303abf5bddd4d3168afe480105a71819e86e7952afadb32a2c7aa706c5e8b0da9d967916c99aad47f330c74e2a1bda0b4f423d201f8d3b97c1e42ea826d17fa652cd3c7294883f59fe3f3f8d3067af45b87cefe39341d72e1bb9d42d0acac54bfff6c0672e522d36fccf6b421131072018351e0359b31490f50c6689f97aa0ebff8302c1ca904b251e012e8f006f2b133dd4c7ba5faafe56b6a95f99adde0deb5f49527829a4533ff6980fbe6fc64412bd614578f6a8f46de9e7848606a4cc269bd8e4d6d95478bf8c3ee19cdb34ef5817568ed2c7ef6da68e1f8e77b9469c6275cf40ce74c5488bc5a30abe089c127caf2a5c59cd01f2453c33bd17ae907a86c4a13d2a8e5b5eb01d95f63ffc9e8645fea2a05df8162ae2cbe1808246e12ec2fad8427c281904b029a92a83ca69a6fc35f92b1ecc18a93e0b3c0bc228e40515c328ca9eb49ae2df816fd61656b5b4179b0feea4c528c30bb1b763fe98246b655041b2d7534c28107f59944100ce6e6a34257263ffbfdc4e71802b931fb6a9fe9c7830233a8d0bf9e8047bd6ab6dac963cfbb886a5ab8ededbffb091cdbd20bd6e753fe184edbbb6db3aa12151ebea6eb84a31196968ffb65dbb00cc09b6d0e9d5bcc862df7c825ed7b31a5656907822ca8667a57a789767932f53f83cb01b89cffa956c518f1be11782f7c7fc915a8c94cf84902dd7afb65d4a5de2ad4638500e194e43bc8059eae043d85b91c40e9c46825b4b5d3c145e25e710f0f19abb189222a93525c6ec90bc08af89c97fa3157936f955fa1c8af5e60186692d71ef7616513af110610c9d1c3efc762389ef0b595cfd9611b974cb4eadadbace2a8ce4425a5bcc89a84f4e0a09b86995b03e53c3c99452751666449b26605a29b198fbf0bd4c3c0e9cf7df8f48de55bee9b1f930c9a85fa06614cdee06aca2b81b140f53696e4d0ed4f57d1e1b7cf0f96d02d92a5e68d3236c0bd770af67bbfc1727da5578a15f6b969ffc85c90d21fd10e6e91ee3c02215e41d875b3e4d13c1078c77b5cd483235c59db578c1ae646757d3595e87a4f5074fd5d29a672ca5a5fa8ca9c5e747be348117a65e5d08bdb8f168e5c1539244fcb0fe43d264d9df006dea9a653b5924afc5fba08d1783fc35e0f2c26f20f56114837d7ab03a8058c065d218e4b9f56e2b329840a8f0bf8f054fee8e9072bb07f302b648c0d9569b06ae00b3bc86778bf17069826144dd9a4944608b96f2a853e2a48b0b3f8a9c0f5ab473392c1645cc7b89c69ffdc5aa2ab3c0addef51bcc0844b7cb030b8b0af739b40f85220b686cea8345a63dc41cf3586c22af0f421e3375d1d0b724820a152564c2531aed25bc1f4b7c7b2104f0688a5a716bffd7ec910f47e5117cb15c1cd8a70f73615f06faaf21edf58bd714e8717d9db9636e43edddb49479a539536c11881541ce9e6939d2b2f6a10d4b988e81805944f406f0b117343765515f29027499eb3ea299c661c17f0fc606fccb207f8880b520dcd0d39d373d9ecfe10fb0ac416ab2ccf48d46f02074850db8027cfa2ae276e8694a2335caf8f59af6e36cc53daffc97eeb677985cfda69c9934e86f154a574607d1d4c805ce8f798245df34f45d02ae3027ce1acf453713df04558efdd9ec60157c3fd8f68fbc91743ec79c9336c420301cec795144d741f8013e8128cf58d21fa17a165f5e9453db7edb2de55074f96b0ea7dbb52fdac0ecfb9fc563b8961cbf4faac2858017a1915f1a1a235672194c03fb3e0717645a4b071b068aa0404d09beb760c3efcc0c3879ccf3857ce122d1bb52c2d331b285222a5cd924613f9037619c95de8a675064f78495b95abecd95565c47b720bd3e6e7126135b830a2262cbec55df066b0444009c27fbf03682691f16993aeca6507e4577088faac94a71f98496c5f30efc2a5da87776d4b85e30278ea45d71475293b49c6e2e2361403a33a32886a0d01b6668354659bfbf829f3c71aac3b65b970d7e7bb027c6cc33a3a14c51984a05719427d4cb5116bea665839772714728ad510334078b21d736eb381fff2f9a05b0989317ec81dc8bef59ab92fa7fe1bfd92165c82f9e60e777a1bef14c66b06f556cfc4654389ce4bc527bbb2499157ddd4bbc12dac7f24b9de54458a3091a22ff654230df061fc25ba576993aa67a2d80293bd22926348c3341052134a39a66348f374fc19b777c2cc5e370d81259bb7c50dd71ef17155a86aa3665a42cd8ad6e9a7b59dd22dee459396d7b0e33d48242192c8209c5b563a4d656fcdb3da491dfb3ea670f1dc16957a3abcc479d77004a84a8ef38d0bbd8bf5ee13eb2ebc2d2a67b962936496cd5fb16abf522385ca7ccd686d7bdd70ed09c6372d9b8d852763ca6be2acd2aea93c0b0ea917cc61d47cd7411120fadc7ff17e098c9626b66d21f90cdd871a777c9c5fd52d07cfcc6269ee580f22d36e92283b13e6398b90f6b321f00aacc8c911f27af7fd9c091add43e69b27b342e250d0a289244b1a445b6f20c1358a6119c228baad1bdb9e7d05c1af093c3599e6ef1d1fd2f8cf8993acdf90ef459b779ab3de741e8e0d6648e5b53202f0cb37a31942b6c60b6066839fb4ccb6af79535992ea69aa5747cbb9122e875a571e47d731bfe07e0ce3efdffd0cacbd6201786b6d835503929d00ce029c40a10b38b605d6190c94041aad204d77542194e98838f797e15bb38f5e3a8f13127a1b984b9438f38b6f2f1c428a360ebcd62bed3ae1d9149ab7a1c04958ea2f4722dc6aa67f42505ba4581677fd519722b2c8898e466263f4f6f4d16d3b2b965c42d3c069518c7f409908b571dcce19d071ad74bece67bc1c022d9275f149668b08ab0d29348c4b2c8ebc1620aa71f68664e8ddc4adcdb628db014b5f8ccf30805402ad3c7f8c31dc3cac0ed43ed80f4be187055361a4e4b7d8019fcda4913ef6ec723e8286112df9633355796c3e3b85f667345405eedf6a717954f1be6074708de45cf97812713eae3487d86de80983aa67487f43fcec164a12b74a91b8ff9f69e0f564c12ea193a717ddd6a7324b90b59d24f02ec7a27844a2863f49d712842b40865bdee1623b48b5f65ce81178bbc717edc53adacb8a621f13598bae57a185f7c748911b267a0a84559a9376e66dee92cd47bc15bd8b1769d1ede702f9e1b0a555944bd2575107e2228d9b659250bed5375736b13de9ffec2b3b3b599b823eec8be5abd82df3499dbb179d5414d26db47ebbd270985ad6a58978f42649379785e3ba449f4bc0b4712801cdadc83d5ddb1c25b91ceb0609437cdb37a7c6685b045a73e58ae0f89e128d2fc458b22e00983a0893788b25f7ff3c6f56b025d7acaaa916a4d691688ebd93994c2e8135a6184675bba0cd1e5a8ad205de2f9812bfe0012f6e611cbe0e199b4bf67148efe404588f179fa2bf22b47d25bc5d644d8080d5c809717d6984a40809dffea3c933a593dfeec84a0c928f80af6f1798d313e55fc4f7f9bb4a97460ef357975b1503867032b61470290ca785249d30b687782649d31dd621518f3217f13b5e561b769a2e8e8ce2b3b20597405d1cae780d6b5721cc8f2a3dad191b2fb5714a1672ad2b276cbebf73e59509e71402cc9c36aed85bfdfe22cc3db2ec1c87c98b48fc002014291ca89342b486df642c640a0b101e456eb2385c850ebfb459a950783815cfc229dba2a6e22630877e792ae4bbda0dc16f94dfa51ae20d1fe6e14c368ac08a6f56e45bfe6c6ad91c20687daed6375455c501ec7d09cb695f11deed7a799ac53363d35319f4c0aee740dc356834612386dea1459905f3772eea64f8e25bb5b4d4dbb6e8dbefe2d995c769536e31ad8f9e0cf15f07f9411967ee98789a423a5b64a2c1e310055c4e91a0ab5637c4f6f8ea316158a81840e97e2d56e9c06c259d16779bbf4f65f4157260c84de2825bfcf50d6fef1efb68fbf3286e95693f24591c5ba65bb5a0cc2c75bb64c9eb9b6a7574b888e4397d69eaa47b8be9398ac87c1f1712bbade4a784da0489c36df8a155b560fb74fa9b24d7137ac9bfb4c8e148757c1ff0225b723afaf0b245d2b624a1b56e010895ef80e24824d38dfc517059c993df2d397bbf6c86140c2b84ce10a344b3f52f1bb3de92dbeace30bb0cb254790ee2edf3864c474596b8a556d57df53919edb34bb8074ddeab988f6468cd9c2b1a572c6a90052fe6849a89d08f055ecb79b1485169ac7672e2f5eb89154af3045aadbe7d6283131f461d308a5a233b8bd204dda11f1ff89a8711f3451bc94e8802d10318cacdbe0f3a8abb3741ecfa6520e81829d309fd1e515f6c161627efdbe4d6bafcb08ae9aa633f07687d24831e135562a54ce6db1fcc53bfdfef21daa82bccf90e4624ef0e42ab4170b1b1114f3cee340d3d16be751562e0dee393cfe34243ae26ff326434302942cc2020021405a75c9d3b77a2f06c3bc9b780e24c0d742e74ee2af968f64bf070c3ab2acb57c7b6ac6bec68dcf34fa0552784ef24cc605c8972cf39bef6084ed83ccb2af8c22c473e73024501a0eee731dd6ba5401e14bb939671e88fcc58d67c4b3f768e0bc0f9fc464d9e2416c8d1d114901974b5afd5b0b4bb43c997da5fa4c2c1699fb906472ac848cce224fd3398a9251f579f5f261ed261ce063876bd7928a73e502c29486b090b41fba873336c16ecf6c1d51c09c4080bac9fc488a5ce9ec4a6c6fbcd43ddb33dcaf2d742dbda4aa3d98926dff76567029b777cca238a84d5e80c0c098374114f30a21c642b6bae954ec889eafc3d990253881f3e6245623ae089dd533261aa8ffa268da3c69381f17a3d5dbb605cfc6a67ed5d5436276421f55605955867f258159ee381342afa8c2749e369836490127042e07d120d4dc9daa484c8d4562496a74d39c0c703a11d14a074e21c699ae53c40f25334b9e7020c5bae201d5183175431b4a0e5d3cebb984022ebed337806b9243923f3569f24335d28abdff063934e1fb3650b1bb07415e2ae9bf43ab015901179dda2896e271a58708c1371d6daafacb2d10621e2f643696a8356b3fc0e3b288043fd03fb1b4bc23a86645a2db5821e81ba742fe3e8b7ab21a98cc1403750e938f57366346ddf645c2bbd988486fa35ff8ebe68a64d24700edd0d9b3fde0d3fdda61f62ad9a90b4e871032510a3ff72d97eaa795c892abc6db30d2e113578a589cdaa2f10a6759850b21d06a8e34686bab014151686fc9e81d28f67ae174723e08ec3a5dbac9e7786d19e91a2a6d1e657435df1f1e199bee7c777fb5557fbdb7e62029424c11f29a51b3ebaa412872cac2d1cec3ac94e1acfdc950b7c7d7f4a7ca410a97ef887ef08d997591fe0e2ac74d9781bdb8e4900be843451c09d514527023d47e6db6cd80ff5da673df61631ff600e7ff51468386d2c20a9e3bf697c04884e516159844e2a64809d009a3351f152141193158f00720f361916717e19f9e15e37f04c8870b168d354090c1a75e76c8e1d8b54c47ec382498ffa538d33acbd07e710e49d509a574816a781dab6b31013364fa35b65d1f1360b31bc42c3fb7f4c483d02502589b091c16bdc274fe864a7f5d2e92f9c7848178509445ac251dd3b98ebfe9208a70547a0b6deba64880bf9713b2a742761820f3893f52ef124ba88bf2cd26a76111929218a507e897f44f583869efe7ce406783a250cffe481e354810d302053b028448763911b62ccb1cf0b36a6426a598b3d276b9022c32986e6c6e4b633cec993da59e868eb8b05ef05df65fb7be1ba2b5f"}, &(0x7f00000012c0)=0x1024) getsockname(r0, &(0x7f0000000040)=@nfc, &(0x7f00000000c0)=0x80) getpeername$unix(r0, &(0x7f0000000180), &(0x7f0000000100)=0x6e) accept$packet(r0, 0x0, &(0x7f0000000200)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:04 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x500000000000000, 0x0}) 18:12:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) 18:12:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001959000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:04 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x600000000000000, 0x0}) 18:12:04 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 18:12:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000195b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:04 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x700000000000000, 0x0}) 18:12:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 18:12:04 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000340)='net/udp6\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x8000000001) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCCBRK(r2, 0x5428) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) sendfile(r2, r0, 0x0, 0x80000000) 18:12:04 executing program 4: r0 = socket(0x10, 0x4008000000803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x81a, 0x4) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000380)=@security={'security\x00', 0xe, 0x4, 0x490, 0x0, 0x0, 0xf0, 0x260, 0xf0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x91}}}, {{@uncond, 0x0, 0x128, 0x170, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d3, 0xfbe9, 0x1f, 0x3}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d2, 0x6, 0x2, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xffff, 'syz1\x00', 0x15}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, [0xffffffff, 0xff000000, 0xff, 0xffffffff], [0xff000000, 0xffffffff, 0x0, 0xffffffff], 'netdevsim0\x00', 'sit0\x00', {0xff}, {0xff}, 0x67, 0x1, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x10000, 0x0, 0x1, [0x40, 0x3, 0xfffffffffffffffd, 0x10000, 0x1, 0x3, 0x3, 0x7f, 0x1, 0x0, 0x7, 0x8001, 0x892a, 0x22f, 0xff, 0x6ad5], 0x3}}, @common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0xa2, 0x20, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/231, 0xe7}}], 0x1, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg(r2, &(0x7f0000000040), 0x40000000000020f, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r3, 0x4018620d, &(0x7f0000000040)={0xfffffd94, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000195d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:05 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x800000000000000, 0x0}) 18:12:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) [ 2058.438825][T28906] IPVS: ftp: loaded support on port[0] = 21 [ 2058.655894][T28906] chnl_net:caif_netlink_parms(): no params data found [ 2058.763850][T28906] bridge0: port 1(bridge_slave_0) entered blocking state [ 2058.771179][T28906] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.779119][T28906] device bridge_slave_0 entered promiscuous mode [ 2058.787004][T28906] bridge0: port 2(bridge_slave_1) entered blocking state [ 2058.794770][T28906] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.802548][T28906] device bridge_slave_1 entered promiscuous mode [ 2058.814505][ T5053] device bridge_slave_1 left promiscuous mode [ 2058.820796][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.878879][ T5053] device bridge_slave_0 left promiscuous mode [ 2058.885131][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2060.690161][ T5053] device hsr_slave_1 left promiscuous mode [ 2060.731863][ T5053] device hsr_slave_0 left promiscuous mode [ 2060.783899][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2060.795733][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2060.809343][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2060.874188][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2060.977477][ T5053] bond0 (unregistering): Released all slaves [ 2061.066470][T28906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.077746][T28906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2061.099434][T28906] team0: Port device team_slave_0 added [ 2061.106931][T28906] team0: Port device team_slave_1 added [ 2061.181085][T28906] device hsr_slave_0 entered promiscuous mode [ 2061.218508][T28906] device hsr_slave_1 entered promiscuous mode [ 2061.315764][T28906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2061.328059][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2061.340259][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2061.347947][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2061.359242][T28906] 8021q: adding VLAN 0 to HW filter on device team0 [ 2061.372914][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2061.381580][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2061.390780][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.397836][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2061.451541][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2061.459953][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2061.469077][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2061.477547][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.484645][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2061.493883][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2061.503674][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2061.513246][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2061.522492][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2061.537903][T28906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2061.548966][T28906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2061.562207][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2061.579189][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2061.600855][T28906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2061.609480][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 18:12:10 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:10 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) fstat(r0, &(0x7f00000002c0)) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x3, r3}) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$security_smack_transmute(r2, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x2) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000180)=""/172) 18:12:10 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x3f00000000000000, 0x0}) 18:12:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000195f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:10 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') fcntl$getown(r0, 0x9) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\b\xe5\x81.V?\xdbP\xa0\x99\xda\x9f2>\x99\xbfH\x81b\xda~+\a\x04\xf3=\xce\xb7n\xba\x8c\xfdg\xfc\xb3\x8dN\xdb\x19\xc6$\xb5\xfc?i\'c\v^\xa26\xd78\xc7\x06\x81[\x18[\x1e{\xb7g\xab\x01\x19\r\xf6b\x87\x00\xcb1H\x8e\b\xf7,\be\x17\x89\xa3J\x96\xbde\x99_^Y\xa4\xb3\x82\xce\xb8\xcfN\xa6\x83\xe9\xa3\xfe4\xdd\rO>7nE-\xf2\xc69\"\x9a\xce\xe1e\x1f\xa2\x01 1\b\xf7\xeag\xfe1|\x90\xbb\"\x81\x1d\xa5\xa8\xcew\xf0\x15\x1e>=\xeeQ\xbb\xf6Y=\xc4\x89\xa5l\x1bX>*\x90+\xcd\xe5X2\xe6\x14\xdd\x11\x02\x18\x10\x87\x1ck:\x96\x1a\x95-\x1f\x8b\xa1C5\xa3\xc50x0, 0x9}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r5, 0x2}, 0x8) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) sendfile(r2, r0, 0x0, 0x80000000) 18:12:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}) [ 2061.964942][T28921] Unknown ioctl -2143271630 [ 2061.986622][T28928] Unknown ioctl -2143271630 18:12:10 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xdf, 0x0, 0x0}) 18:12:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001961000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:10 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000]}) 18:12:10 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x4000000000000000, 0x0}) 18:12:10 executing program 4: syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x801) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xc63c, 0x200, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:10 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001963000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 18:12:11 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0xfdfdffff00000000, 0x0}) 18:12:11 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x6d0000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000580)={0x0, 0x1}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r1, 0x10000, 0x4}, &(0x7f0000000300)=0xc) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000540)={0x1f, {0x1, 0x4, 0x1ff, 0x4, 0x1, 0x200000000000000}}, 0xa) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) write$ppp(r3, &(0x7f0000000040)="c08178c5d737269278dda9f5daa2968b54a306eeb18e5b2df404e7cf99fb70976f5f2fd25829c5ae3ec193412ef59404cb3cd8e69d60a3d8c7026249726e94ad4de04c9f79f97bff5b0e1cf2223e7af9f8c03a4e07b11b66d9da7e34e441c9f803", 0x61) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) recvfrom$packet(r0, &(0x7f0000000340)=""/105, 0x69, 0x0, &(0x7f0000000500)={0x11, 0x0, r4, 0x1, 0x7fff, 0x6, @remote}, 0x14) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) exit_group(0x5) 18:12:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001965000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f0000000240)={0xff, 0x1, 'client1\x00', 0xffffffff80000006, "83768b8becd784d3", "52bb36aed50428c369002ed7dd2c60ba2c3705f81155e673413953019abc6034", 0x400}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:11 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2062.968342][ C0] protocol 88fb is buggy, dev hsr_slave_0 18:12:11 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0xff00000000000000, 0x0}) 18:12:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 18:12:11 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001967000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:11 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 18:12:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffe8a, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) fcntl$setlease(r0, 0x400, 0x2) 18:12:11 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001969000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:11 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x40) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0xb86d, 0x100, 0x7f, 0x2, 0x6b9, 0x7, 0x1ff}, 0xc) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:11 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') sendmmsg$nfc_llcp(r1, &(0x7f0000006600)=[{&(0x7f00000002c0)={0x27, 0x1, 0x1, 0x1, 0x800, 0x0, "c5df4089b79887c7e337a7c8597afe1c4bc1030e21b6c7395a7c72696de33587a592f5e8dfe958d5709a6e70aa05ba4c96ce0f3ce4ac639f277f04a222da98", 0x1b}, 0x60, &(0x7f0000001880)=[{&(0x7f0000000340)="3e3bbd49a50075e9e7d6c0be8e47cf3727a0a6", 0x13}, {&(0x7f0000000380)="56d0afe57d5aac8b71808b8106954c999f868c331c09b6dce7ca2101ce426339534d86caa31110ad8edc142e9e7b6e7bdc1b3f0eba8f542179609df5ba6a8be35366fad8455ccaa3658354fb196b18b35606a54a303edea0edddc537c3ef1fe5", 0x60}, {&(0x7f0000000400)="3df35c7a536bb2f40f77a7760486e80ad767046d9c03f272a434197daaa681c381ef6324cfddfcfd3719d3603e30e5cf1c4af1e4367342c40cdf3f6da09ece9cc95b304a6bdded93638db7d45db75cf1f945ef3d9e5afb5afd13ffe90df8668cef35e45331fe037a648d461a80e9da80fe02f7ba5d83d24d30d4c2eca76b38eed2811a60b37ba98877fc866fa90e5dd989b89aad6c2a52d35c5f3b201846eab70214ea856999a8", 0xa7}, {&(0x7f00000004c0)="c6174191287bba6a410816d942eea20a2f233527ad14fabb31919d05eab9bd00b77f2972bb15cbe24f4be61d122ba347a1895aaf258d044082847282f5518dd1b299f987db401eac970644ad8b718e28375337948709a10a4348285e67ab3b69b4d36474665e533617470cd0ddebd71e952aed9012d4e15c3ad74a5055aea9520a1da56d0f81f259cc8f848a0a3403302a2946b2721e231ee4ae456befe3320d1f5f63d0eaacda0570adaca4f60cfd150898504b3685", 0xb6}, {&(0x7f0000000580)="254bb9cc495f9daca352c0f23983d86fa8bb011691ad8196d33a14b5442f3e198f892a237b1bb4fde7e0824f6bc4da4218be305b22be3559d535894ee79121406291a3d21b2dd75d576bda4af9d8b8dc23e0e50c1103fbec4dbdd386115aa3c21779b148b399a8c57cb90336eaf9a71ed0b91d098ddc97995f046f0dfe5b3a02ff78f95b4ee9ececa2fe4396fc4ec3cfc953a9aa95f778ec13f0c936c1be79592378c5380d772475d1f3be20ba26abc0202ff28068", 0xb5}, {&(0x7f0000000640)="ed27b2fb30016446c4d6e9e50c89528c110608cf208e71b05c50aaed4a6914deed710c68e8c64f2370f508de054e6e49de7f4d58bc4f62fd849c233027a7222d05282778289f367fc4195f990684a48b0c1e39560eecd04451283e2b707d781b5649d4837429e7fc3e85b7ff4daa81e2d5031fe3d18e21224f02cbef2f5b5b229e85af1f19c6f424aef5abc4bfaf7509b68d917b482c815fdfbc8dfecf2e2cc06a50d166392ebd0c0e21e360709f4a156d3698548414525d209b4cfe78885c956ce7f2f1096c1307d24c63a581", 0xcd}, {&(0x7f0000000740)}, {&(0x7f0000000800)="4996b6f5e86e2acacdb8ad240c05e9e8fb991038483863fb3fc14cbd902da41845f12b00826ffdbbb4db17a647aaf8a1d21a75573c5e261aac3e6831fdf65fe2c7c61251af2ce1e81488532bdce7c02c96d36111f522de45fb7a1b1badd7744c4d", 0x61}, {&(0x7f0000000880)="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", 0x1000}], 0x9, &(0x7f0000001940)={0x88, 0x107, 0x5, "44a303c35d4780362bf90aee5628def7a91e4b0dfe67b9bee577a760bc5daa09f3d88d16d1d4eba4931ec71bbb1e58905bbbdf64f53afde210693b5ae7049b0d2b056cba22c64a1a5e8eaa4696e5413f7f00d01330781045b69450c884557337aacec64cc6dbb053a52b7af273543da40b"}, 0x88}, {&(0x7f0000001a00)={0x27, 0x0, 0x2, 0x3, 0x100, 0xff, "653cf75061a0cea9cd0d6fef3c6fc038e144685870acf9ec24e7e414763db53d50e745faee2e2034167c13cd8ad2985b3624b8a9ededa3fb10cc7675fd6b04", 0x2f}, 0x60, &(0x7f0000000780)=[{&(0x7f0000001a80)="45b1de98e3c2345d8e5091b7dd5bdbc2f8ccd3640f6896f65b50c9c0ffb614bcf402e2175e46d95ea0e9fedd9cbca2c3dc984cc5c45df39ade27271cac1888c04443f655600de5535149d883373e3214cd9739ef6288452cd7e3b8a2696056422fb940bf4bf96611e7beae0b1f71bf45c3c22d8ef0a6349d72d68536ae3e6db9382390d3b45b9f88b5fd0925ffa910da5c043caa8591acc439bed9c89a5b334490ea2795cdef000117d33848fa43b1dba4c723d281", 0xb5}, {&(0x7f0000001b40)="b6b55d91a006b531f2d17a87d44e7fd0a78627a86200578afe67ad87c4070b9358cf841a24472fc63d50619c1a5af3d632c0107d6f5f74953c67907e52fa708cf5a5cae6fbf9179422a6189994a6cd0f5d1d83aa267e3fa5e10735b29655be0169044c1eef", 0x65}, {&(0x7f0000001bc0)="0e677195a5477bba8eed099f8c448f577b145c7d35df362867e189a99793f4ffb9d3aef50948cc76df39998672fbf19886318b28b91bfc64063608b510e05148c4abfc8fe2a1cff7d0ba5d60aa1b649a62cc8658f24b31ac12b630f3af22341c8c43f85987fb948ac651cd2f55f94c6b21f1e2754b5cbb5be55f07fdfe8cbfe2ae47a8d0c94dac68e3914e358379c0297e8ecd37ff0949e805b2e1634d66fed4a1eee281602b810d4af8f4dc92711ae6a90216311c241603261bbdd277284d1e66afbb52b23ef97ee896748f243ef1e0381ea83ce646c0681e85d2a63af8fdb17626d010a367f725b4cc24460a20bbc7a297117dd68bf62eaf2cc750b8", 0xfd}, {&(0x7f0000001cc0)="15a13f16f7feae2fae63f17105d317ad3ac4a5c27deb4269e8af221f1ba011192a147093a1ee8923150adc9a760e09f16abdb8539b11994da7b701b889b7b0374964c96febee788ab597eee510eca2491598100cf878982b479a7b5c16bed8599c45e3e59fcbaad2961093ccb052e610b5d909bdb77b9672b1ed6d79", 0x7c}], 0x4, 0x0, 0x0, 0x20040000}, {&(0x7f0000001d40)={0x27, 0x0, 0x0, 0x5, 0x7f, 0xfffffffffffffffc, "e3bf4d1931651a31a6b4be00d50dabc196cf7cd22795c9f3e3d02fa31bff2a530a39d6cb8cbbaccc013040bc7b8802a922a25940e45f03323dc15e0eeb5783", 0x24}, 0x60, &(0x7f0000004180)=[{&(0x7f0000001dc0)="e9ecd3a17899f9514b1accaedb125ec54cc051ad991d1ee5cc555c9eb5d7d429510f1f6ce3c228031e029206ff327d15b9349a55fd9c60bf1c70c27529f92d917f90364e80ba92c28d117a7ec9e0f1d8938ea22b9882574cf96820f76b2a622736c95d923e7f1760c5aaefe28e02b5dde847e9b1b1862db65473332718503908a1a616536df9c219c5d5f311b320ba2b60a4519fe363ce120683f175ac4b73df7539753fc23a41005e7e95b643ad72f31f8c7a6538777718ad28064a3fa9fcded3fb751fbc6a18406562122d", 0xcc}, {&(0x7f0000001ec0)="6e23092938058f2804cdbc208f44b0ff849c676a4c45ecae21284717912b082d3f493b6ab1f0cb72238d91c8e6c48cf7e188ab8102109997b28075cf4c8a1cba1b32e8c174905a1a5a7dcd2817a6d0eef03667a6fbb0af4e3b0ae35982ba72a94c529e2d851b9f15db4217817a9c74c2a154ab15d273a6d84705ddd8e0fbfc9f67897c41ac7451cb362984372f4aed26fcf94f5545c2a9002ed8f097cf23327a1abda34672347d", 0xa7}, {&(0x7f0000001f80)="73da9e458074bbb100f424755648aaa296dd1bd73b6f55a8b3c04067dd8d64084ef9091c90bb30396996bb5d9cb66923a0d1982dad03fd972670bfa48ca92ceed6094a4d319383dfc1d68ffd49836f9146544ee4bb05139cab541165a04fb7", 0x5f}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="1af9dd099cbb0ea774be3abba0332d5b987fcffb47916afa755810659479be6b1f2628a814307d9b2bea5a2b08d04eac37a1e5f741205b33e8c1d591e49490c9016130534e1db3d13706020ec43bf4024c4a9166e86b", 0x56}, {&(0x7f0000004080)="180e3aa7e4345cfb905c2d552e68e0d4e75070f83aa6149d9661454909a897db06ca399fe5decd3f1847a63e90e4d222cc420d34cde43cd711c4e45964c2fa83679a97688710559e3e80732db3145047011e9ad046e6c9bf858871d50d2a8086dc0d73658cf731f5a812d1e3cca4a5f9e9bde394eac3aefd1a34e72032993d3cf7525251a88e782bec9cc384349cd74a3a97f907dccfbbc3b70874b5b186d1ce0900d97f8218957a407e8f97cf72651ec18ce809d1f658c5dc7fd1a0269cc85c8e4efd", 0xc3}], 0x7, &(0x7f0000004200)={0x60, 0x29, 0x9, "85654decb686de6719f274c5ec2fa05c94538a9fb8b61d00b79a2cfc35910a4485a06725975ddc3a9df5b0deae5b64a18880aa49e9a068a9a04b282e5022bc471be90d1a69d0ea9576"}, 0x60, 0x10}, {&(0x7f0000004280)={0x27, 0x1, 0x2, 0x3, 0x4, 0x440, "27c08b83649804a7d0a861909cd21d36af7492fa309534635cf5122c041168695b4423719d8c779543b41f52be45477462276fdc015e367a4d3174e7e21105", 0x34}, 0x60, &(0x7f0000005480)=[{&(0x7f0000004300)="7901f225649911788fadcd92fbc922d537d50b7c04bfa813b2e9a30002502c5ddb05fdda721083c35134ae7dbc611e64f995c8b4a15e4095985abd7701edd23b5436a165105928c08cf3c555d4e4707b4a5b1611b79c", 0x56}, {&(0x7f0000004380)="76a9218274d3f466246d72535ce6bed4f7004dfdd83dba62f33832531ab40b45325597d2b97b69690c1546ba65e91ccec3421f1a2376e18db7bc73fa73afe38e56b49c9461b9ef8f3f8a693fbb3df74cf89c3a12e1ce88d94f86b9825dd75a283859f6db9d940c981cec70783585c67866e54f393691cc3d8d953644ea1c772f8d91c5c0894b4095e5e64fbacc3c5d18b22a0df789fd28fa55204d3e9bc655bbce9d4ec1f37005cbb434d125202b67e8fce8eae0a08aef19738459c0fc029989e44c0b126ff6d5ea881d0d9b9e90eefa7ba92988732539885b8bd9e8e5750fbb832a57908d44ea099f8fb17285f22a584657d7abe80e05d5927398b763abd04e041eb2f19868a51821a550a9b1a49ccb6439612af62a847a37f276722cdc69d7697140cc8c700c2dc711f9be3b2386029ef73216a459a1063269a495b71b755ab1fc6237e6aaef2b121c0a60b0fa8d4ba84929618190594b24921409f8725af80493c8364772d9cc5ff0edde1abbb394c62d09d58af8f9ae209c96ba62d6ee7018b20d7e8a584d145877a350aeba070ca5f949697f9bef9e14ca7684e1ca89c1b0df149a5e0619c6f302ed3f043336ad4f7ae893b0d8baba362a5b92b1a48fffeda4b993413127c136a934ce53f6322ebd48a801249bfbe753f17852be102e7b7111eddda8c5e37fcfcfed0057c2766df1fd7788057527fc0e83a2a90c89b23b31631408373f8706c7b8d732c9dc3a7d1c97197c136da07b239ea91052c456856e643bb15654058a77126586f5ef2d9e85e72da1eaf169a2f57cb358fed1bce0bf15f81fe8dfaed8a7987afebd78a8682007d146a762f54a4124d4a61faca204f5c9cb9d3476f67db896e570efb64651f85290a17302d5cc04914307932601e5ea5d00c250f46205c36756fca47ea4b1b237cd30f46be605d0cc7117ff92495ec1428eab236f2b2e287e0a32c1d917825eeaf2f568e6e0694cac854a175e5b6e0645568527bd70d6a6a6a29117771cf6e43cddef240e6eb4576cee1eeacb26bfc08209314c6431e0cda3ab458e1c28e1a57f0876dad0c0399f1c0e89c7ad7e450b3fbf6af80a41db30e0a8c2d57372ae241c43b4922758fb8b2078d33462651fc927a98872e9582898313a47a040bed12e97ecafd690dc601551fa4bfc04abb1c8dd77bae6d5fa0932a6ef384a2929033896c1e12eeeb4414b3f4fdda98ec7ad86d3f869af4c7a16ef91cd854bbc77073d56f3c2c7b9f02e702f08114d598db0c2381e1d11802f9ddefe507f2b1a289fdd1c73a41cf1fa956f68fc0e1819d956ae146fb3dbe397f822db2c21118dddf1a7eaa3103b7cbb50c13d8702a51cd21b1626213a6842b340593a8ba006cbf2219b101ae07e206b91723d61046805e834a9f1ba67487222c72bfbbd9dd9f2d8ccb90aec88cd3c0345aa43278d1018ded9c1b91a667df497b33c8d5c12bcfe5acec0f3d37043b3c477058c72596665735f53ddb085e5b9e98ea4bfeecbca679123677229ce246ed0ab1a1183f958cfbb30e31b759474ba0fac300352520e73729cae3f657c2f0dd2098cd450fbc2fd655b664c9ef821b5f47cf9237219bae30ce4449f500cd750c79eb598a21f4aa142e56b79084a17cc436840d5b6fe017bf71397f0da090f7b23241a91564f50e7fbe8b5d63c5c84cbcaa12dea66ba87c081fa5d805b1616d02ed81cf6824ccdb491d2bb7388d88632fa74e7a7ae77b8ec6dca6da6c8953c3d0eb8d29d411ec607b1dd7f9cd26bd5e1262ff8c93a05830db79a6c7622afd32e77f3949c12bd2f2250990e48b50ff8f96b2cc4b476e967279b3cc4b3ae834d5d5de460c1d87370186c61141679fb2eb3896b1ea81e8ad1835c579b30cdd493546e40fb93ded997f12751a670a37632554e9d4fc556121580b061afeb92506535f4afc83e8c1aff8cb97edc6eaa5e8770e803e93596256f34ac8a78aa01312079b07f9c71f7a77c1f02d60bed27c3f5307960cfefe042600973717d5728dfdaf42d59b93b21b303ac2cbff00fabc0df098455cb09caa1787aeb337e77b86a4a390c16e17dc80f484f6d08ce56e90b6390e71d6aea7ccd0944bbcf29af364f9276606ba3efb9fbd0469c30038cc4d9156cdaecb6221c6d39efa78ef9f340ef5dcf769698f4d8521e5d6366afdc2afe936a2799cec0bd244b0c14f784b259f18cb3492d694cb71b063943b163e5ed16c5009db61eeb61de3e633a08712ff7f81c9a44fca97fad8690b9b8054956981647b61c993cb830b7cc6fbde15b93f970b2369bf9e17753672bf359711ac9520f44fce9303c245049185a5a7972b0dfed114be8ed905c8efd8ae293ff67282fe7ea0908553f8b3dc10e0d436a4835bc4c31c6dc937152e838111c39568df3ec9d99eaa05d5c0b8e2f267549dbff568cdbceb11311291b058d9eddd651801d70d9203fb50639539682f35433b1a71e62c15c2b2e9cb60c0ac66e4b2a264831f94d1cd5dea1405aeebb76c75a3421dd95d3553991f47e0c716d5534d75d65364fc5bb2771a381feae5f12a057c1e60bf241cec1434490510d8ad8dddfcf6b0c8adf23872830d417c470077303b0582b7a2a54d3b87053600a28e6ef40b9a4449accd942ca3cc5e38430934854247c6b056c45bea9b0364f7560da1c09cc2911a2f2691e625fae5760ba8ec6301d24c84d9f6ca1e149f21498c16184bb6e90ebab0da19bb70696aee76080e63a2f3035fcc23c594903e91d65d4b2355fe9dbebabefa17f632b59c865fdb9c27de9411f4351d38e9a699be8258dbbe0f3264aaab5134bb6b5fc46c04174c14b674efb814e9053d1bf527731fb12a2f62a3f9fcfe158f2d58cfd8b974f6bcfe1bca87e7110d4414a2f98dc620df167a3874b44cc9e74ddda8e5dfe49aeeae7406756d41ea09afec73e5220490ef6af7fa82518d01756d1b6dfad2e0c1e16cf93ac097ea15c1d5683f2cb208d1394b7a3a4073c1c0590972fc06f9270ce43188e7e3aace533f79c4fd962319d35a38df7ae0300a76a98d76d587871f473c06dee148d7e82022fa6b34bccac657366f4d178930211df129f0a58003454f3d7249b8d2c9d87e4c7a7e59760854335771a38ec8485c94c447958f386bc1ad531447016bb7cd55c5e253c7945a2ac2f90f1123398b3932e874ebcbed78eec323de8155965d62997c75f33a44558d5becb57554acf762a6939995b26feddb5f20920e56072745b1b121ece68fd5074d061870937499b6a0eaabfe2a78ba36b913466b17e86a1d1a76c26f0ebb87903d64cc8be91e87444f7c0dab3ce77a6b7cb014be23150447a917382ff5295b939d38d61f9baf53b78ef79f2352433260e488a5c11d8c5e5d2f05aca29243f7c04dd2377f0ebe471fcaaee1e0df35a60dffd4843e5b9940ff3e838591ab1e8c97f7e4b9d4dbd7f9a096226b6cee31fe370d67adaf882d0be7d3c34e6587aac603f7cdac7655531703754bd0a71225c430a73c9bf6e5d68f08b359203220929d5327aaf4e4d3c40cc1fc7c67c879c279d0366be56212f576000339b292f05b1eb27ad93c2a384ea5181363962163a3af43f363fb292857b0573eda593e35f101b438aa53f7fcf3c5e204abc9282f9c1c6b672892305f27969debbe139594c4374c8f84c145ad7c83057e5f323dbed3279ba7898982f0c8d6ac3d44b92990546a9a1c96ef77521d11f25d383480efdde2d08a4a36e1ea138664c4c30c321cd01953300b02de45c1c918346cd35588622882aeec564df46bf021197a8b65c6014a46fd6acc8eb0bd164264ab9ee38c7e0f5e7954edf4a563c21f726b8a9a89a04adf7058d1e7fffbfedc40ed363a6c70d1d2f82956845a00117a42ff10de4d453fa79ad01c06e725e105a230cff5b9a7a1d48f3e79e62dabbc3cf4f6d79c753488d106a5a8fceb532694012d3a5822f3a05dffed22f4fd022713649de1efa77bf7d2ab750779e160b4452b766fe86691c2af175cf15563b4c11ba7e70f90bc79b6df546639c569da50d97650a9ef730da30a605e0626ec0adf1c81e4427c82146083786d0eee3ff83b8d3fd6ea6b997e3fb9babea5358e8952c3b38f252b00b4e52fd6a2caca6683ca375f60b136bad706c26676761ab6bfeed38f06dbe2011ff265f77b683f6c8bb04fad2715c84d407cb7070228ef93b504bf699ccb941ce8119c874f747994091b4107019eecedcc013f681629ef644e491dd1fd8fc87e64311fa52fa85532a11fdc1924eff013f3533f8c1f0e779038152f8927d26b04464f99c9491355be275c525f5053b5de737b9638a4452129f74b0a574f82b202f907982b9c5388481415ac6f354504157bbc9f1f377bfd50706967ae4ba8907af3f4ea5a0c31c5296076cd880fbf79533659fd4b49d85cbaefea540328f39a3a91c01de39c784e758122f2801815b610216853e763862735e05f6a679905106c9b3278641ea6a239546b677f8ca744b72d204c5868d319e20d11a5f572f655fae213865737bc239739b55d22b1348ab538aba9ef70fe68f83327ed945640a62ca7ea995de6897b0ca5b761f7ae1dab71ffb8abd6be316e9d2a7dd0041343bbbd071f313a7ae46fb12d668d8ab543183a96f6e00c0b6dacc132c23946a49ab5f15e3a40aa489dcf34a67a79cb281b6ee903a4c8fea74db8b98046cecde9faed662942fbef1a9c352d18c38bf79d79ff32d4cbffc17220bd98598e589b701382495513477f3b3e532331760ba87e3162482cd88418d3f26f70e5ad7bb46fac34bdec075092f436c3afe173fb713d81169deaefb00b069165409ca487906207bd22080403d8feed6797ea357ae0d7716bb22f4a49c555741a56fa60034e7f1d63ce7e0c84b2823e4ce432d688069f527953adec73e46d6e982e66564731752db6af15bc1406fe6f2e6123c067c47ec1da245c619557f32c18046f797ae11cc92e60672f8f4e9178a7e25761dd40c559fe82c3d985b7a0859b1f9000f58456a754283cfcee5b643aca2871827f605c7cd8067e053142c33831843965e41686cc2856fa902c087320d1c1d4c14dd06cc6e8a96758bb021909f0836636a5798765f85373f4712f79c7635ea835a78d7b6037759c94af667da2de8b4850ff337ae945b887b6a1dd2c29a096cd47fcdc18258aa839724004d82560bafafbdb3b03ff941f95831b5c5e9ed989563903ccd5662d28eea7233b44fc3dd80151d3b69967fc6fa709a456072aad8addc7f8130df8709a186b47ce8aeee92cde86e9b10a399d0b13cbc0106cbbd4295158d66f572b4de80779a3778d15a50eb09e27f0c98f2e7556d4c5b40e95556c6fc6f8f79861804b80b377f821ab6aa4f40d5740471b54d0a65a30bd73c41cd4d4ed23a6b8e15c8cc3d6ec6f49dd330d406f16c5a102998fe1175317dc4e34d73b9b6d9224224e280f9676ea49d1be0c3fb4d561142883ffc8a88325f688bb2de9e3b16acc9fa09f4a53f07c9d16889620e17c5c18316185afed4ef7f44ce77505b22c274ee9c2595d40b5491ae4e330dd9c15e6c6f58ba3fb25616a911d42798e76e378b4f33278db95448d7d0c273307bed483e057bf724c26165e69a81f7f5e0cfa51f7fbb019382b227848769b8328497c57bf32b66ca178fe4c054e9edaa0ca08174210c777fad3c6d6a1d1fc60cdd8f94877045d55fc0b529254f4bd8f442b7eff7225315dbfa09a2b2818fc5fcc631568150c300e4805660a266e9f9d8b8c13e6a2c07ef2cd1a4eae1c0bf2833b2c2e98d47f807248d7eddace683e66cdb", 0x1000}, {&(0x7f0000005380)="78b26f5e1866f5643e442a450a67c7a6b5292b5579ee50862f1b4156e0cf5aabb12bb57c94e5033bb91984b2edf78181210c7dd9c38af64b7674f0a289041d8c8f037ef9ae130122025c110eaf9d8a2f37730ccf98959287", 0x58}, {&(0x7f0000005400)="7f22b7c82adbfaef2fca6378a6491a0b8b033f07aeead56b66d4cc4be44d06adf78bf3c4ff417dd5c16eb8c9401383357d05d40753b4db437dfd9f84ea1f90d58db2525847d49daefeef18dd661660989d68bf50c16d6206cfb062025758b5b52a9c1a5cebe943d3bfd1f3", 0x6b}], 0x4, &(0x7f00000054c0)={0x88, 0x115, 0x97, "406a145c593ca17c4861360859658799fd3f0f91f9b6e24654d1e203fdb82ce9d2aab59f02543ec118b75c4225787fbec5f7af06376ef04f5a8fd14b6008dcab73a6dfb9950b26b49ae14ebebae1368df9706b3dda6b812b54d4cb60ff351b209fbc407d8767d38528620f97e9d8bb47897f931ea648"}, 0x88, 0x840}, {&(0x7f0000005580)={0x27, 0x1, 0x1, 0x7, 0x6, 0x7fffffff, "fdc2e031fbf9aac61aebd0a8f3ca10a6dc951d4dd768bc0f50b547165ad8d3955e380d0e8bd3919fc749f6f0d970188852303238529daf4e10bec8a08edd61", 0x25}, 0x60, &(0x7f0000005b40)=[{&(0x7f0000005600)="94f0bf24f93ad31acce53117e5586266e168962137da04fbe022acbeb79ea041787cd0389dc5f17d148bc13941c355616f247c167ebd94f87fa3c283c8c8f3ee7b7d6668573dc7d5660f32cd559f27a117853934e8eb46fadf2bb1a73e52b224603c03e64e25276e7f92d1570b1b3111bf9f628dee9cd65537b224436abf00d2502b06bf0a817dffa5ba1a956fb6aa089e0e66392436661705132479cc4ed8e0258619f56444cf0b3096db328b2f75f67e6f6df3878d694ce4d56d3627237a3569978a60bb387bfab5aee7a1479b0ddc25cc8d9b9c280b913d79f1c02ddc454b945386e696803b692099832e2af68069fca909ad1b", 0xf5}, {&(0x7f0000005700)="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", 0xfc}, {&(0x7f0000005800)="8b3aea5d0beef74a9a5d01df10e84b7c4e890aa0382f21eeb4b80976a587addc0603f29016abe4f62a4071a1a1218e2b5f4184d3c1da24fbf4b80f383587f887795bc3fdefcabbfa2cec9d7ecca1efbf371f03f14dd2592926d071c11956e42012ed1029abce747fca46b46f26033ec96262bba891a58ca66ad30bf88e07a25db596738cf4ce69", 0x87}, {&(0x7f00000058c0)="431f4f0942e0960c6c5a4fdd0ea293aff35db61d61f5ae", 0x17}, {&(0x7f0000005900)="c240073b3d7bf1e56c163194868f86b1d1d2746d0f55ba52b51777cf1cc8369da1d1bbc2fa74ece980b1c4b17df6e8af559145ebadce3b43eb033a4802f6dba96c810bc5d3a57243c2ac9afb5bbd7b1ea3c6af5fd1051b1a394d81474cc6feaed935f83cb8f4661926aa4668b821151de93b64eec90acbf5679e51976024f740c75caa57574b436932dd02a792b4ea94d7b2b8c01cf7ce0d3ec92d1f69", 0x9d}, {&(0x7f00000059c0)="009e206f8f473ff5cfb6c261a713def227e64a25f7d6f54b99a571eb630adf6908896c1cb9e478358fc461ee68dbe9d03cf904eadfc60b3fe0048b179125d3e08476406c", 0x44}, {&(0x7f0000005a40)="5ae206f5298e13bef451ff21e58b3691b4dcd7eec434384a80ecd97501b200c387529bf15686ca7f51714c765d3088a8ba501bacae1f173bd3db115bdfe3e6ace7f017eceb96ea066766669a5635e126303ae333455d9e04026897b6d061f3079b10e9320a541bf054bdb944095150ba4bad81cc1b4f3f38ae6a6fbe7fe0efd2474b0d8a1ecd41297db677ce3025bb26f2b66aa8aa7e0f6c8b30c32993c67e0832595a69954fc626ba4b", 0xaa}, {&(0x7f0000005b00)="c2db036e862d9305091be8fa992fe4b076fd0be5286f10dffa9de61b645b318dbcb30a", 0x23}], 0x8, 0x0, 0x0, 0x4004000}, {&(0x7f0000005bc0)={0x27, 0x1, 0x0, 0x5, 0x6, 0x401, "2b5167ad606e30eb5915f995bba9713424f145dfe2da8d6f845110aebe0dfa4ed229b55d56cc9725e33729985246029cd123c2dcde36bc034396f32b20e6cc", 0x33}, 0x60, &(0x7f0000005e40)=[{&(0x7f0000005c40)}, {&(0x7f0000005c80)="c6b3efde3aef9274a1820976fb35cf6ddb6d790176397cc4c951c9f854df773a49805451bdb872dfe07e23b9b295c4f5828443352762de1653abd6f10a81dfddced59a41875fc3dda7e704dfca4f7139c9a412a4a6a47a1c26a166bfc21c76afd66102c2f33694a26b8b2b6f933c5780b4c9341fc51a2129efc285398cc1488eb6b592184533a9b65da6f84bc0505c97ea8222cd3051b294f670b1ae5a25450dfaf04eee1da4857d82e46dae72744380cf6b192c8dfbc0e4", 0xb8}, {&(0x7f0000005d40)="ef43b234e10c25f95ea6778d8e99c48d5af933db19017c64e61495a43c3482624338940933f124c8744f03c7b8fb30c3a13121be62bb804a5951a13f2525df2d67302524d1ac07af24d8d449a57534e5bc4444b9d39ad35d49c140e5bc02b440fdc8fb57b5f912ff2edd4e2740f9029b4ae52d5579ec4a43dca359aac865abfd752aff0c22250a2dfd85420e8d366be7aacc1bddbfc0b58182319e4bae7391ee6b4531e9c86faacb43de8ad7bf79c4a6682859d24611ca699dd2dd689ff6877c7f2d4d8060d2048480cc47e73d782efb34a4fb80c86ea587da6353bdc8", 0xdd}], 0x3, &(0x7f0000005e80)={0xb8, 0x0, 0x2, "15839bfa5c1306dc3cdf1e4ed8d479f88148770d1acc490b28fa2d546742ab6f87b3ba8fc5ed4e05d8897296e4570931df8715886d8836aba8bf556469d5b5860a5340d3f2d8c6f34c2457c5efb6eadacfa83425872e69dbdb3a5b98df387edb67168e42a618804b2de2501553fcfd6f5d85470434ff8b2d7a77eeb6eef88c183c2b9ccd544054c5eebcd6f5a58822c75d84aae54d24302c339c2b30f14a100d1fbada16ad0cfc9f"}, 0xb8, 0x1}, {&(0x7f0000005f40)={0x27, 0x1, 0x1, 0x6, 0x2, 0x4e2, "7d5a4fa11143bdfa489f941cc6661b265545bc491d19402e14f24202e51539abe2aa5d3be84e1f06b583d84e9d09e70e39273064b0887e9ac57471e832d049", 0x38}, 0x60, &(0x7f00000064c0)=[{&(0x7f0000005fc0)="3ad63becb7dd1979a6f7b99e6451ae083077ca34a1d5e47e8873879199d1014d99e92176", 0x24}, {&(0x7f0000006000)="e61481826bf91ced4eebf882b75b05d5c9628a754e726964c0df05d9f7732db1a76c9b174e507ddb684b51aa6863d67375c3f5708edf17322179f65c15d413d59df88ce626ad5307b76a5c732cd2d0d802d7a397fd83c509e7ca519716604b62e07ee7d25e545b8eeb72946a5fc0fa003b8d3963cf4db9e27955752edbd105b99c5084ce70f8dd086f76d0f954fb568015a2717ad1e4f8cb97d835178990a49b48a3ad8da2289e1880670a42bf80000d21f41a8e6b2e2014680d1313beeef03794a6cff8ec21934399031e8b", 0xcc}, {&(0x7f0000006100)="d5a3f69ef4c4cbaf3ce193fe1328d991bd30e4a3e2edf82c9cdfefa3730ec9207c0f002277e6ece5b1810db4f7967b88125cac84a72c8c199970f321c485c9d0f95085e3f785a319aaabf3940e06525662e8d03fc7546dc0423939d786216e81477ef078c3117ca5e51e14bad85e23f29c61c4c8cdf90176fb8a2aaad6e32a5d815dd4a435", 0x85}, {&(0x7f00000061c0)="bddd6cf167c66ca5c2b1c8cbf0bc5549b4c0", 0x12}, {&(0x7f0000006200)="3f4b85d390495ac30cb9ed3ac66a4dfc80ee03a118bcd8674620620ddf76c5d2", 0x20}, {&(0x7f0000006240)="39b8287dfe465eafcb01fb8e0d25f1c9abc169676036a8da9e53baa0929b3375f2bf79d0e029ce59906391742afd9996ad1a1e9343237cfb6eda731011cfd2150dd6a6d2841c20f536b64997d9fddebf720720ff8895d9697473ca3e4090822932cf73a19e2b8d8d4963450acac95385699a2840518bd92ee897964660d941d9c4faabcc8a5daf65673679da30fdacfa35a9d9047ebdfa1501dc7b3de3c80409765f6295de21aa3ae57c0f75c33efe88faed75aa1728622bad1595deee7a33077025d44c5966cb02c495744c21e814f74395de570f2e", 0xd6}, {&(0x7f0000006340)="a9d5efa8c3cc426f253c3d196226b90993c5aa9d936cfd2d3f2c61a9138a9556861715b660576179640e2c66475d538486d5d3daa6c7f87332450fa4ac996566355e6ebbdff5cacc82640165e4fcb1c169a451b7f3e6965671a74b2e35855c45", 0x60}, {&(0x7f00000063c0)="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", 0xfb}], 0x8, &(0x7f0000006540)={0xb0, 0xff, 0x3, "cb6a58e823c022af50f57cc2ee99b28d13bbc883f4ea3deb8922550fb90e44dadc59baa12bc52a603b9468dd9fff1f3d7cd9d178472cf8bbed3b7cfc4627ddeaa65d2a12205a0a9f25978663e0777bc5f1f8da277b1bc80a06bc79d763d850133d4dc1daa227a947032e02d29cf489be2bd062a2b3e1aac1d31a1fe8e68c91aefca270116496aa5fdfea4cd712c915c03b61786a32f5ac43012a67b642c73f0f"}, 0xb0}], 0x7, 0x20000800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) nanosleep(&(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f00000001c0)) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") getdents(r0, &(0x7f0000000200)=""/179, 0xb3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sysinfo(&(0x7f00000067c0)=""/4096) sendfile(r1, r0, 0x0, 0x80000000) 18:12:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000196b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 18:12:12 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x402, 0x40100000004fe) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000080)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000040)={0xfffffffffffffd1a, 0x0, 0x0, 0xfffffe82, 0x0, 0x0}) 18:12:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x80000000, 0x0, 0x39f, 0x0, 0x8, 0x7fff, 0xfffffffffffffff9, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e21, 0x9, @loopback, 0x5b98}}, 0x9, 0x8}, &(0x7f0000000340)=0x90) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000e28a4800"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x440, 0x0) write$P9_RLINK(r4, &(0x7f00000000c0)={0x7, 0x47, 0x1}, 0x7) 18:12:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 2064.019343][T29018] binder: 29016:29018 unknown command -1964900352 [ 2064.096318][T29018] binder: 29016:29018 ioctl c0306201 20000040 returned -22 [ 2065.715313][T29032] IPVS: ftp: loaded support on port[0] = 21 [ 2065.920481][T29032] chnl_net:caif_netlink_parms(): no params data found [ 2066.027460][T29032] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.034762][T29032] bridge0: port 1(bridge_slave_0) entered disabled state [ 2066.044911][T29032] device bridge_slave_0 entered promiscuous mode [ 2066.053195][ T5053] device bridge_slave_1 left promiscuous mode [ 2066.059514][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2066.098922][ T5053] device bridge_slave_0 left promiscuous mode [ 2066.105044][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2067.871261][ T5053] device hsr_slave_1 left promiscuous mode [ 2067.941389][ T5053] device hsr_slave_0 left promiscuous mode [ 2068.014919][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2068.026363][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2068.037371][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2068.085481][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2068.177674][ T5053] bond0 (unregistering): Released all slaves [ 2068.262842][T29032] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.270799][T29032] bridge0: port 2(bridge_slave_1) entered disabled state [ 2068.278848][T29032] device bridge_slave_1 entered promiscuous mode [ 2068.297775][T29032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2068.309494][T29032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2068.331405][T29032] team0: Port device team_slave_0 added [ 2068.339589][T29032] team0: Port device team_slave_1 added [ 2068.411127][T29032] device hsr_slave_0 entered promiscuous mode [ 2068.478522][T29032] device hsr_slave_1 entered promiscuous mode [ 2068.569597][T29032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2068.581947][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2068.593241][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2068.600938][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2068.612840][T29032] 8021q: adding VLAN 0 to HW filter on device team0 [ 2068.627379][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2068.636120][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2068.644639][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2068.651731][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2068.660236][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2068.668925][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2068.677449][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2068.684583][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2068.740446][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2068.752788][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2068.761584][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2068.771431][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2068.789041][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2068.797463][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2068.811812][T29032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2068.837404][T29032] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000196d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:17 executing program 4: r0 = fspick(0xffffffffffffffff, &(0x7f0000000700)='./file0\x00', 0x1) signalfd4(r0, &(0x7f0000000740)={0x7fffffff}, 0x8, 0x80800) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup(r1) accept4$tipc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80800) r3 = getuid() syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfff, 0x0, &(0x7f0000000100), 0x40000, &(0x7f0000000280)={[{@creator={'creator', 0x3d, "ce8f2045"}}, {@creator={'creator', 0x3d, "cc43565a"}}, {@file_umask={'file_umask', 0x3d, 0x8}}, {@quiet='quiet'}, {@type={'type', 0x3d, "2ec026b0"}}, {@umask={'umask', 0x3d, 0x7fff}}], [{@obj_role={'obj_role', 0x3d, '/dev/binder#\x00'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@appraise='appraise'}, {@fsmagic={'fsmagic', 0x3d, 0x8e}}, {@fowner_lt={'fowner<', r3}}]}) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000180)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000640)=[{&(0x7f0000000380)="0304bcc63a0ab43f19c7b637653f6ca67cd30aa52650e9fc5815ad86e7c8fb11d9daedf617f844f096f34792d98a7e081145639f3748d86fa19220cc0a0812330cca022e4b8a4c32cf26d7edf30c49cefdb729f7b123afcfb35e26b8b6ec1bfabb97c9ee9d4321f21162aeecb9d2b95e2bf27344163bcdbdb3798c02585f80f90438018a5c18eb4ac6f0246e06d60164fea6c19aa88490e439524c59896bd408fb97a0a5ac8a1a76dbabdfef1599b3c2bec049d4d35b9abfe63d000ed6e892", 0xbf, 0x7f}, {&(0x7f0000000440)="af7ba8c9bcd13b4c1e63f62cd48aba0a8c79df254f7ecb6e5c407a7f8945d179a9563dc5d1c675536925821a03bf25813d94d5503d5c5eccb8654a807fa5cdcc435e6925f83147ce682d05593f925d259cf28db96a3fff94cf542e9bc4fbda78e4b867c1cd5184d971f35fb098ba2f1a5a026a1e7e7535418b15ee07246a9a44451687bf90cfa2d88aef81d1f703ec3a645730147a287df5b12bdd47971f709a3efdc831c895ec21bf7cf4ba03a91ea97df506d24e602d96ad77604ef7219b9953ae449b3bf22f21de5b3bf842b02e90bd4de82c33430b93122f31386f960d776d", 0xe1, 0x2}, {&(0x7f0000000540)="0999deb0fdea2f342225ab4499036e5c001b732c376296aafb317355c623bb590ddfa1d8ac91803a53fb4937ea01fa848be706c2702ae574625de4943f80a1cb3c6b42a3ad496b82be2b55e86db5c95a80ddcced18f4efda7a7469899440579a0f321f0fd82d8473dcad10601fb6a16ed22c29693e331765540e8574d16d820531aad3cd097b47ad4db162ebedb759847d2112b46bcf18516f2f9ac388d239fc408627d865ebb2de2fddba8b04318fa5dd46b6bcdcab4305011a8f9654e7cffac9bbd00498811bc9b0eb83b0f9c4a7c5fcac730bb34899b59cc587df5ccd683edb11169797cf913c2b", 0xe9, 0x7}, {&(0x7f0000000200)="ebe18a87828fe2fdb6943adc387d12094b3b27e25c1f65c0d59442389c5cd1af80d3877cf41edd4097d111641653629a4e74608968042049238733cb", 0x3c, 0xffff}], 0x20006, &(0x7f00000006c0)={[{@nossd='nossd'}], [{@audit='audit'}, {@measure='measure'}, {@fscontext={'fscontext', 0x3d, 'user_u'}}]}) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000100)={0x0, 0x0, 0x100, 0x1, {0x1000, 0x7, 0x8, 0x9}}) ioctl$BINDER_WRITE_READ(r4, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:17 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') getsockname$netrom(r0, &(0x7f0000000280)={{}, [@rose, @rose, @remote, @null, @netrom, @null, @bcast, @rose]}, &(0x7f0000000300)=0x48) write$binfmt_elf32(r0, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x1, 0xffffffffffffffff, 0x100000001, 0x3ff, 0x3, 0x3e, 0x1, 0x42, 0x38, 0x30e, 0x3ccd, 0x101, 0x20, 0x1, 0x1, 0x100}, [{0x6474e553, 0x4, 0x5, 0x8, 0x0, 0x7, 0x0, 0x7f}], "8436d493b06f655c039bf9827efdb2b2cf475489b886efe018acf39f4e631536ab877fcabb0306d4308aef04563170090259fc3def46b52f53a39beb540658620eae41693ab7724617e7a9341638ba27ca77e7e22558c9eb57ee07783130af3109b4a3e0c91b4953f0f186c4b801831bffed9541010ec0dd241ef7df05bc3fea91d2591a7284dbdd05853bbcea472b0bb2de59d225ebfe224f", [[], [], [], [], []]}, 0x5f1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x28000, 0x1, 0x67d, 0x0, 0x8}, 0xc) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f00000001c0)=""/141) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 18:12:17 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x13f400000, 0x40040) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x10c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbccf}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_LINK={0x64, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb611}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff8000}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) [ 2069.148349][ C1] protocol 88fb is buggy, dev hsr_slave_1 18:12:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000196f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:17 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x40000, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100), 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x79, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463040000000000347d2466fbc2d050b9c821a932520907062ac3d4621578bdea0530380faae192e8ca09ba0966b1a4b08d434211d38b1f95fcb5bcf3658054bb580902d0faecb9cf1bb31e9fd6c7536a9a76f4a27b77d9bb468197af14ddf055c35829dbca5dcaa1b2f9be9085888dc7ad7d23074b008bc4"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) [ 2069.260816][T29052] binder: 29046:29052 ioctl c040563e 20000100 returned -22 18:12:17 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 18:12:17 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001971000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2069.462640][T29070] binder: 29069:29070 unknown command 287492 18:12:17 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0xfb, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2069.519821][T29070] binder: 29069:29070 ioctl c0306201 20000000 returned -22 18:12:18 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}) 18:12:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001973000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) io_setup(0x8, &(0x7f0000000080)=0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f00000006c0)={0x1f, 0x8001, 0x0, 0x9923, 0x8}) io_submit(r2, 0x5, &(0x7f0000000680)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x8, r1, &(0x7f00000000c0)="0a6a461388cb642b182024", 0xb, 0x7fffffff, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x200, r1, &(0x7f0000000280)="e636d7f35216c51b5b51ef5dda0e780c360389e2726985fcacb9271a4dfc6c45095c56e5c0c54822115c7a2fe23591fb20555e7519df7446e80eafc2785c3333ee2438ed54e2c7ea6304deea5d8b30ac25c4d533ecf42cfed99bad8f094299bf74d393ba21de878140a97340f9907e17fa452ca1e969d263f0b2e48fa6d8318cdcbe9dc6034b04827788d54c9a29a02717708951e592e161f76e0078b99abccff63ebd", 0xa3, 0x5, 0x0, 0x3, r1}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000340)="d67620c497b520c7ab74f4322ce75c659fb98667305e0a34dda5e2ef4d4dd0cf250b4e1db8cc28d826f5ada44609311b399fbf655501f1f5f3faeb5023f8bcd0fedc75", 0x43, 0x5, 0x0, 0x2, r3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0xc6d9, r0, &(0x7f0000000400)="a9d766078072fbafc8a7addc58d7fe2243c359c65a5647ecb2c808708a97e2635cd6cfa1b72978952206bd43a120f4c1e538471f83c230e6ff67bacdd1791ecda6a76b4a40be69b7bcff64106e02cae038e01cee5ff4f271d88db48647a51f961c910cf7ad70e5deec4c8042deb24bcd51b45bb39b2471b1765ead2af3de39ef7728ff418d7115d613d96d3ef0491e6af3a8a8482338a987db24e8743c95aee0bf5e9cff52eb226156d3c16a0479bab9af0ae3c2c0d267bb22c49b971c94c4477c704401e4b8e0b73ff3b389957ddac64207928e3badaf595af097322fefcd4c2a7b491fd8", 0xe5, 0x80000000, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000540)="95d0de338c659075d9cfa3bf9246fedf3272d3b00e027e28a51999909c5b915aa86bb402036175b741622729af110585463f854992aec2f4cdee93f173f51b1eaf9901f8e9c22a92ed482d93b98fd51acde564d702fd500a05078bc8187a93f3a493c5018d3e91083e683959e63d76ffa3d8538440caf94b8f38cf42f12b6b9f69e3f8f2158a8ea08f51708a110c3c343578f9634bbcba626cf99617bd4dae3780c8356539d54a318d0a0d788e09771b15c73abc7dfb63029eefa4d9dea90d042d1ae1d01f9434a853b3c9b391c41450b750943dbb2ebc2a", 0xd8, 0xff, 0x0, 0x2}]) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:18 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) splice(r1, &(0x7f0000000040)=0x59, r4, &(0x7f00000001c0), 0x2, 0x1) sendfile(r1, r0, 0x0, 0x80000000) 18:12:18 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:18 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000]}) 18:12:18 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001975000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2070.419858][T29100] binder: 29098:29100 ioctl 801c581f 200006c0 returned -22 18:12:18 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) [ 2070.489981][T29100] binder: 29098:29100 ioctl 801c581f 200006c0 returned -22 18:12:19 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setregs(0xffffffffffffffff, r1, 0x1, &(0x7f0000000000)="620ac3aa003b1573915055e6447fd820e69ff1618b07a77d32b7f63d9902b2bc4cfff7d2e29ff64e3ad1e0f88fd4f9d6547c9f4ff756950073faff8117ac51017e9d19b95b5c0bc6e262f3b807e30654920ef354ca183a023114d653b2330b1e4626b02b6db2818b6ec94755e7a9b505b673c3342983be01ccb9a3be9ec50ace897e902c748d8b2512c85a359da35fc544ea0f11aec357ab039e73f867236fbee468fc1bcd07acae1f27999413a49d9419") ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffcab, 0x0, 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r3, 0x104, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4bbe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 18:12:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) 18:12:19 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x18000, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:auditd_unit_file_t:s0\x00', 0x28, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='clear_refs\x00') ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000280)={0x9, 0xa, 0x4, 0x9f6a1f0b3dec19d0, {}, {0x3, 0x1, 0xfff, 0x7, 0x1, 0x5, "9d70e7f1"}, 0x0, 0x3, @fd=r2, 0x4}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="126304644c000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="53022300000000006000158128343e23fee39b2c15501c3aabe3ccc974a8d3e87cdcf05a2187c050fb6b962bd32f591904292760bcb8f38aa6c8bc3cfcbc2e3fd81078e09d3470fe18fb91a1deab886a71a9b2a7abbaaeb10017c72bff435405d18138"], 0x0, 0x0, 0x0}) 18:12:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001977000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2070.889782][T29127] binder: 29124:29127 unknown command 1678009106 18:12:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") readahead(r3, 0x75, 0x5612) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:19 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b40000007630440020000000d6300000b63000007630440030000000563044002000000fb40d7670a7e592252f6424338a0587380d83c053824d32718b4fc141fad1a76e1835a2b341a15a22bec53787fefda812320b0ddab4eddb6c0fa843ca6bee695d878c8feae6d5a36de535319730033d69a2e8f3a1d17813c94503d6b8e08d59aab472335b27f6c03c4d1923b21d7913962488c3b13937c1a7fd40ee3954cc18f27dff905d873c5d884f4938e6a57f4380f3fafca4ed3ebd7f64f85d2a8d0f2f348cdad4f64621bcc2641b5a27faee394f512d33158de033cf4e09c79af5ac2648c9621e85bab14"], 0x65, 0x0, &(0x7f0000000040)="bdbe812db79d93b47e3ef809d08bcaec031760ee222880373b56869181ec12e7d029ba01a481f4d99988cb4d342509db2987d1ca38f8354fb831c788dd30cbf55c777c9f67c78d5038c4f6046002d65552163607be3983454e903f3ae3fe0a9fe2b8536fe2"}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2070.973131][T29127] binder: 29124:29127 ioctl c0306201 20000040 returned -22 [ 2070.973824][T29132] binder: 29124:29132 unknown command 2294355 18:12:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) [ 2071.022807][T29132] binder: 29124:29132 ioctl c0306201 20000240 returned -22 [ 2071.109873][T29132] binder: 29124:29132 unknown command 1678009106 [ 2071.154654][T29132] binder: 29124:29132 ioctl c0306201 20000040 returned -22 [ 2071.172546][T29142] binder: 29139:29142 unknown command 16395 18:12:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001979000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2071.209873][T29142] binder: 29139:29142 ioctl c0306201 200000c0 returned -22 [ 2071.223469][T29127] binder: 29124:29127 unknown command 2294355 [ 2071.252823][T29127] binder: 29124:29127 ioctl c0306201 20000240 returned -22 18:12:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0xfffffffffffffe11, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0xfffffe43, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="ca1367dc0e4e6751c7d816d64f115816cecb1b527c259523b2f465c6fb9afe090a661bf9aa9bb7d9209e1f9f028057ebce0f0ec06044c7628e54133173a75c58cad8a314f4f58e302497c2c0380cb8bfcd1cc5c0"], 0xffffffa2, 0x0, 0x0}) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000080)={0x7, 0x2, 0x1, 0x0, 0x0, [{r0, 0x0, 0x5}]}) fcntl$setlease(r0, 0x400, 0x3) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x80202, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000100)) 18:12:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) [ 2071.320888][T29146] binder: 29139:29146 unknown command 16395 [ 2071.343796][T29146] binder: 29139:29146 ioctl c0306201 200000c0 returned -22 18:12:19 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2071.496861][T29154] binder: 29151:29154 ioctl c0306201 20000040 returned -14 [ 2071.559116][T29158] binder: 29151:29158 unknown command -597224502 [ 2071.687828][T29158] binder: 29151:29158 ioctl c0306201 20000180 returned -22 [ 2071.819114][T29158] binder: 29151:29158 ioctl c0306201 20000040 returned -14 [ 2071.853362][T29154] binder: 29151:29154 unknown command -597224502 [ 2071.884881][T29154] binder: 29151:29154 ioctl c0306201 20000180 returned -22 [ 2073.052666][T29168] IPVS: ftp: loaded support on port[0] = 21 [ 2073.250864][T29168] chnl_net:caif_netlink_parms(): no params data found [ 2073.360912][T29168] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.368074][T29168] bridge0: port 1(bridge_slave_0) entered disabled state [ 2073.376437][T29168] device bridge_slave_0 entered promiscuous mode [ 2073.385172][ T5053] device bridge_slave_1 left promiscuous mode [ 2073.391691][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.443657][ T5053] device bridge_slave_0 left promiscuous mode [ 2073.450132][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.241403][ T5053] device hsr_slave_1 left promiscuous mode [ 2075.295613][ T5053] device hsr_slave_0 left promiscuous mode [ 2075.353435][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2075.365025][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2075.377534][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2075.434442][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2075.525880][ T5053] bond0 (unregistering): Released all slaves [ 2075.612565][T29168] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.619690][T29168] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.627582][T29168] device bridge_slave_1 entered promiscuous mode [ 2075.650340][T29168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2075.660848][T29168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2075.682711][T29168] team0: Port device team_slave_0 added [ 2075.690061][T29168] team0: Port device team_slave_1 added [ 2075.751997][T29168] device hsr_slave_0 entered promiscuous mode [ 2075.798616][T29168] device hsr_slave_1 entered promiscuous mode [ 2075.898603][T29168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2075.915826][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2075.927125][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2075.936202][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2075.946873][T29168] 8021q: adding VLAN 0 to HW filter on device team0 [ 2076.007689][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2076.016827][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2076.025449][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2076.032569][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2076.041393][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2076.050286][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2076.059027][ T3123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2076.066085][ T3123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2076.083363][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2076.091982][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2076.110875][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2076.120234][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2076.133938][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2076.143203][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2076.159940][T29168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2076.202341][T29168] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:24 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:24 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000197b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:24 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 18:12:24 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000280)={0x1, 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r4) r5 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$setperm(0x5, r5, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:24 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) 18:12:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xffffffffffffffa3, 0x0, &(0x7f0000001540)=[@request_death={0x400c630e, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/170, 0x0, 0x0, 0x23}, @ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/151, 0x0, 0x2, 0x19}}, &(0x7f0000000180)}, 0x1000}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)={@flat=@weak_handle={0x77682a85, 0x1001}, @fda={0x66646185, 0x5, 0x1, 0x3b}, @ptr={0x70742a85, 0x1, &(0x7f0000000400)=""/4096, 0x0, 0x0, 0x33}}, &(0x7f0000000200)}}, @request_death={0x400c630e, 0x2}, @acquire={0x40046305, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={@fda={0x66646185, 0x1, 0x0, 0x28}, @fda={0x66646185, 0x2, 0x0, 0x2f}, @flat=@weak_binder={0x77622a85, 0xa, 0x3}}, &(0x7f0000001500)}}, @dead_binder_done], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$cec(&(0x7f0000003c40)='/dev/cec#\x00', 0x0, 0x2) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000003c80)) r3 = syz_open_dev$vcsa(&(0x7f0000003740)='/dev/vcsa#\x00', 0x100000001, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000003780)={0x200, 0x4}) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f00000037c0)=""/164, &(0x7f0000003880)=0xa4) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2446241945070c412196a78baa5c8329a74b27579ab8557e470b012fb99fc02408caebe6c5f6ff6ae4b64364d427a3717560f82256714f9bd6d72a593f0ecabb317301de68249dea5edb45acadc7bd23f836ac75b082cffc84d69dac4186c9d3e56286265706", 0x66}, {&(0x7f0000000080)="6f9d5f218b9b5433b688fd9d7ec7a1ba52bb83fae78c2eeb1e55ae6dd03a5742d722c945cbe95d21544f5d4534dd163a96c4c5d44de57073", 0x38}], 0x2, 0x0) r4 = gettid() syz_open_procfs(r4, &(0x7f00000038c0)='limits\x00') r5 = geteuid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x0, &(0x7f00000000c0), 0x8001) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000003ac0)=""/190) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000003b80)=@assoc_value={0x0, 0x40}, &(0x7f0000003bc0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000003c00)={r6, 0x1, 0x6, 0x7}, 0x10) syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000180)='./file0\x00', 0x1, 0xa, &(0x7f0000003640)=[{&(0x7f0000000280)="4e5bad3578b969f8076ce5f75b51c30898619fa2442c773b8fc78d01aa058e5f04d523cb0498087730feb3a52bf703714cc6a97bac293b3ee5a67d649c297659cda4355e234e250e2d1eff54a1ca1c7d65d6f0edf6105d127b56c473e81f85bb7652e0a023eb8e1e27098d433d1061328ff5123b3ed2aa20493c4dfb23f02762dfc78529c9cfdb59ea8a", 0x8a, 0x3f}, {&(0x7f00000001c0)="b6724b69e8e67ec03d551d89e54e2031a3d072b1aed555f71438d3b1cbefa13fb468bcb25a721c77fd24c316de11651d77546765a8eb5c7d62b5d7f829b9cd220763e7545ddb2b", 0x47, 0x3}, {&(0x7f0000000340)="ffbff850e4897b5db51aaa8ad43053dd227f1bba575054dbc735547feb4752974b3a270796bc1338d3981472324c8fd610ebd51572be416bcc446aecefe02e5f8c99aee2f4", 0x45, 0x6}, {&(0x7f00000003c0)="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", 0x1000, 0x7}, {&(0x7f00000013c0)="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", 0x1000, 0x935e}, {&(0x7f00000023c0)="1f057d0b2474aeb79e99d3d8157a55ecd1276a003d0a86c991e0ed99cf", 0x1d, 0x2}, {&(0x7f0000002400)="6b4b20c1ca1bd652e7105cfe7583123b0a568cb5389a93ab0e6669a4eb34ea9decae50b2105c4fe0fd0f1af0b56148826b5666e83330e47d88dbe64286c6597233c2a9dd0aff40", 0x47, 0xc5}, {&(0x7f0000002480)="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", 0x1000, 0xb9cc}, {&(0x7f0000003480)="705cbaf15495c6b7c265095d2aba7900ec814407670c5a70755aded5e8b428dbb2f6a41ee51fdfdc876753b1e8a5459123ea2c634057448f70b7fd25e9f852b450354a79ce0c2b9177f39592baf42bb3f1e4e92ac32237138127a84ed1958ae9fa416eb333da806bfccc1e94bdf18634d4818b89e8c303e108005d83a3c01b369a716b5002b99e34aa49d740ede751c62a3fd1b3b28f7f3320cfb5b54ab6375ac883f47aeea2b536528ff852dcb281dc027f4509bf3c3a55ae6df4e26a210d395087de2b3e141b2899b3aa87055caa52ef733434a7a893d6d4ae5222ab4fb68023526df5100fa7a782ab", 0xea, 0x8}, {&(0x7f0000003580)="f5041331ccfa459088dd4f2c546b2c429890ff30fb8139048f6b632a6ab2338d9a70773df3c603acb2e1a2fb5eaec97f26234a650804a9d1fb92a84285f36ad423d8e3395342ed9da25d32c61e9ab7beb91caaa42e0ae482d9a61e29e2ccb281503dbaa5a5479cda249ad61d0de16d537cccac96fe8f7865fedc9250edf8f534e7095095e17725208866ce89e1bf705aa6e748fc156e11be5a51caad3f2d30774edbe6f7624e2c468a64c9", 0xab, 0x4}], 0x0, &(0x7f0000003900)=ANY=[@ANYBLOB="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", @ANYRESDEC=r5, @ANYBLOB=',obj_type=vmnet0,defcontext=root,subj_user=/dev/binder#\x00,subj_role=/dev/binder#\x00,\x00']) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:25 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x82003, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000340)={0x846, 0x8000, 0x9, 0xdf, 0x1, 0x8, 0x8001, 0x8, 0xfff, 0x0, 0xd6, 0x9, 0x8001, 0x7fff, &(0x7f0000000280)=""/173, 0x6, 0x8, 0x400}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 18:12:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 18:12:25 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000197d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:25 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 18:12:25 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000100)=0x60) accept(r0, 0x0, &(0x7f0000000180)) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) [ 2077.101475][T29204] XFS (loop4): unknown mount option [fowner=éÏõºUÿi(d]á}æ²gwbci„Ð6µy¶‚ujŒÂY{q¨¸lÅ ¬ÑX¸âçPoEA.S/8ñŬïCßžþ†´Q©ámOÅjO×¼GM½ór'ïýV’Q]ØòË4Û“Ii¾"” ]. [ 2077.237101][T29216] XFS (loop4): unknown mount option [fowner=éÏõºUÿi(d]á}æ²gwbci„Ð6µy¶‚ujŒÂY{q¨¸lÅ ¬ÑX¸âçPoEA.S/8ñŬïCßžþ†´Q©ámOÅjO×¼GM½ór'ïýV’Q]ØòË4Û“Ii¾"” ]. 18:12:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000197f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:26 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x600402, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1, 0x2, [@local, @empty]}) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x100000000002) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000100)={0xfffffffffffffd8c, 0x0, 0x0, 0x23e, 0x0, 0x0}) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x400000006, 0x50000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000000, 0x21012, r2, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000080)={0x16, @local, 0x4e23, 0x1, 'lblcr\x00', 0x2, 0x9, 0x2f}, 0x2c) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000140)={0x3, 0x79, "c66c0a12d67348fc881863106ca81eaf8817eff83fbde22595607ea11b2b65bc239237b3c3c687783d4739ee5563eeb944a08f60b8ddd982c36014a6e8ccbfb01135cedaad43c2b46b7f43d13b6d56328c9e64e5b97db00d543ba9e4a501c35c7ac0b83d308eb50746fccfe0fa876b59220742217a4f01fe12"}) 18:12:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 18:12:26 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x40000, 0x89) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@empty, 0x0}, &(0x7f0000000200)=0x14) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @multicast1, r4}, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000380)=0x0) ptrace$cont(0x27, r5, 0x7, 0x1ff) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000100)=0xfffffffffffffee2) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000340)={0x36, 0x6, 0x0, {0x0, 0x6, 0xd, 0x0, '/dev/binder#\x00'}}, 0x36) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="13bbefe8caaac2f8"], 0x0, 0x0, 0x0}) 18:12:26 executing program 2: r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x7, 0x200000) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000001c0)=0x102000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x0, 0x38f}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e21, 0xffffffffffffffc0, @dev={0xfe, 0x80, [], 0x2a}, 0x10000}}}, 0x84) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x8000000001) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0x3f, @broadcast, 0x4e21, 0x3, 'nq\x00', 0x4, 0xc99e, 0x29}, {@empty, 0x4e20, 0x2003, 0x7, 0x176, 0x2b9}}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) sendfile(r3, r2, 0x0, 0x80000000) 18:12:26 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88200880}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x800}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0xc000) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:26 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) [ 2077.762301][T29241] binder: 29228:29241 unknown command -386942189 [ 2077.786281][T29241] binder: 29228:29241 ioctl c0306201 20000240 returned -22 18:12:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 18:12:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001981000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001983000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:26 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x2, 0x2, 0x1, 0x7ff, 0xd, 0x6, 0x8, 0xffffffff, 0x5}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x100000000) 18:12:26 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}) 18:12:26 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x2, 0x4000) pipe(&(0x7f0000000280)={0xffffffffffffffff}) linkat(r0, &(0x7f0000000200)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1000) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x109000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_emit_ethernet(0x7d, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={[], 0x2a}, [], {@x25={0x805, {0x2, 0x0, 0xff, "08a852738c98f9392234bdc05488563509aedaeafabcd4e35d844e198a5c1a898a7d1fea9466867e30c78ce0949592046aa77c0611ce2f32f4fe52cd473889213fb46586f7300b7c679b08bd1e1172a733c4e7861a051f5516fc63f34d5845afb8875d1e5f4ce9085e30bd6a"}}}}, &(0x7f0000000180)={0x1, 0x1, [0x9bb, 0x37f, 0x1e0, 0x2a8]}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:26 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x8c02, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) [ 2078.558096][T29280] binder: 29228:29280 unknown command -386942189 [ 2078.602914][T29280] binder: 29228:29280 ioctl c0306201 20000240 returned -22 18:12:27 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000180)=0x80) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="066304400000c600"], 0x0, 0x0, 0x0}) 18:12:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000]}) 18:12:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001985000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2080.071536][T29300] IPVS: ftp: loaded support on port[0] = 21 [ 2080.217423][T29300] chnl_net:caif_netlink_parms(): no params data found [ 2080.320322][T29300] bridge0: port 1(bridge_slave_0) entered blocking state [ 2080.327552][T29300] bridge0: port 1(bridge_slave_0) entered disabled state [ 2080.335642][T29300] device bridge_slave_0 entered promiscuous mode [ 2080.406891][T29300] bridge0: port 2(bridge_slave_1) entered blocking state [ 2080.414219][T29300] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.422217][T29300] device bridge_slave_1 entered promiscuous mode [ 2080.511119][T29300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2080.521912][T29300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2080.544397][T29300] team0: Port device team_slave_0 added [ 2080.553101][T29300] team0: Port device team_slave_1 added [ 2080.566016][ T5053] device bridge_slave_1 left promiscuous mode [ 2080.572990][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2080.609377][ T5053] device bridge_slave_0 left promiscuous mode [ 2080.615611][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.431283][ T5053] device hsr_slave_1 left promiscuous mode [ 2082.501705][ T5053] device hsr_slave_0 left promiscuous mode [ 2082.542125][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2082.554109][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2082.569570][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2082.601917][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2082.695342][ T5053] bond0 (unregistering): Released all slaves [ 2082.850213][T29300] device hsr_slave_0 entered promiscuous mode [ 2082.898658][T29300] device hsr_slave_1 entered promiscuous mode [ 2082.975763][T29300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2082.990231][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2082.998027][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2083.017025][T29300] 8021q: adding VLAN 0 to HW filter on device team0 [ 2083.026230][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2083.035270][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2083.044071][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2083.051175][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2083.060548][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2083.120904][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2083.131382][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2083.140122][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2083.147205][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2083.158755][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2083.177464][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2083.216841][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2083.227645][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2083.242608][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2083.254255][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2083.267492][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2083.282645][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2083.293354][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2083.306277][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2083.319071][T29300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2083.332974][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2083.366247][T29300] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:32 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x208, 0x10001, 0x3fffc0000000000, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0x3c, "30ebea93e10109532cefcfa1db9727c55ab7803df4c832745b189a18b7ebd991027aaec002405364510512cb00855c0c77df488b9b18032696574d43"}, &(0x7f0000000180)=0x44) r2 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(r2, 0x9) ptrace$setsig(0x4203, r4, 0x1f, &(0x7f00000001c0)={0x13, 0x10000, 0x100000001}) 18:12:32 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x3, 0x7, 0x0, 0x7fffffff, 'syz0\x00', 0x9}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 18:12:32 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000000c0)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80100, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x64, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2164}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffffffffffc}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001987000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:32 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 18:12:32 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r0, 0x101, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xa0000, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f00000000c0)={0x2a, 0x4, 0x0, {0x0, 0x3f, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) 18:12:32 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001989000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:32 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 18:12:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000198b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:33 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$inet6_buf(r4, 0x6, 0x1b, &(0x7f0000c86000), &(0x7f0000000000)=0xfffffd62) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000002c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x8000000001) msgget$private(0x0, 0x0) write$binfmt_aout(r3, &(0x7f0000000380)={{0x108, 0xe98, 0xfffffffffffffffd, 0x254, 0x6b, 0x5, 0x1c4, 0x5}, "a8aeeb0386783c2b553d1a6866a1e20a", [[], [], []]}, 0x330) getrandom(&(0x7f00000001c0)=""/124, 0x7c, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8001, 0x0, 0x40, &(0x7f0000ffb000/0x1000)=nil, 0x56e9}) capset(&(0x7f0000000300)={0x20080522, r0}, &(0x7f0000000340)={0x5, 0x200, 0x2, 0x0, 0xbf2c, 0x2}) ioctl(r6, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) sendfile(r2, r1, 0x0, 0x80000000) 18:12:33 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x2}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2005000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x32c, r2, 0x6, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xd4, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2bed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c7}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @rand_addr="8820aa966e3e4348f8773185a3bea361", 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xed, @ipv4={[], [], @multicast2}, 0x1ff}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA={0x90, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff000}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffff4da}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfff}]}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x31, @loopback, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7, @mcast2, 0x20}}}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x90}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x10001) 18:12:33 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3f, 0x8900) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 18:12:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000198d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:33 executing program 4: syz_open_dev$binder(&(0x7f0000000280)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001a00000000fddbf12500000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x2, 0x0) 18:12:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 18:12:33 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000198f000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:33 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="045f95ea14000100002000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06630433000000e7b884317300"], 0x0, 0x0, 0x0}) 18:12:33 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x404200, 0x0) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:33 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl(r4, 0x3f, &(0x7f0000000040)="8b7482e80d12e9e153308c1019b0aff1d5bb0d12c8a0db803c6ac7b7925bbe1a2f9c45e45b0ecb61") ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000001c0)) 18:12:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 18:12:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001991000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2085.538630][T29397] binder: 29390:29397 unknown command -359309564 [ 2085.583057][T29403] binder: 29390:29403 unknown command 855925510 [ 2085.583229][T29397] binder: 29390:29397 ioctl c0306201 20000040 returned -22 18:12:34 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) [ 2085.643124][T29403] binder: 29390:29403 ioctl c0306201 20000240 returned -22 [ 2087.155958][ T5053] device bridge_slave_1 left promiscuous mode [ 2087.162593][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2087.209534][ T5053] device bridge_slave_0 left promiscuous mode [ 2087.215687][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2088.831055][ T5053] device hsr_slave_1 left promiscuous mode [ 2088.891580][ T5053] device hsr_slave_0 left promiscuous mode [ 2088.952693][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2088.966549][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2088.977597][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2089.022204][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2089.115779][ T5053] bond0 (unregistering): Released all slaves [ 2089.256217][T29419] IPVS: ftp: loaded support on port[0] = 21 [ 2089.352011][T29419] chnl_net:caif_netlink_parms(): no params data found [ 2089.439297][T29419] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.446457][T29419] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.460388][T29419] device bridge_slave_0 entered promiscuous mode [ 2089.474633][T29419] bridge0: port 2(bridge_slave_1) entered blocking state [ 2089.481919][T29419] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.495646][T29419] device bridge_slave_1 entered promiscuous mode [ 2089.525140][T29419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2089.544159][T29419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2089.575655][T29419] team0: Port device team_slave_0 added [ 2089.589347][T29419] team0: Port device team_slave_1 added [ 2089.652272][T29419] device hsr_slave_0 entered promiscuous mode [ 2089.708618][T29419] device hsr_slave_1 entered promiscuous mode [ 2089.770677][T29419] bridge0: port 2(bridge_slave_1) entered blocking state [ 2089.777777][T29419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2089.785226][T29419] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.792320][T29419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2089.891740][T29419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2089.917936][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2089.934454][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.945270][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2089.968122][T29419] 8021q: adding VLAN 0 to HW filter on device team0 [ 2089.982982][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2089.992670][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2089.999781][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2090.026914][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2090.035757][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2090.042920][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2090.068015][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2090.078752][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2090.095952][T29419] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2090.107098][T29419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2090.122287][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2090.131144][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2090.140400][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2090.159950][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2090.170247][T29419] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x4, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 18:12:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001993000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:38 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 18:12:38 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x7ff, 0x7f}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r2, r1, 0x0, 0x80000000) 18:12:38 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x101141) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x8001, 0x4) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000040)=r0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000080}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x114, r2, 0x9, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xf4, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xed7c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x99a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:39 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x8) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}) 18:12:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001995000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:39 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:39 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, [], 0x28}, 0x2}, {0xa, 0x4e24, 0xfff, @mcast1, 0x8794}, 0xbc, [0x2, 0xc5ed, 0x101, 0x3, 0x3, 0x5, 0x7f, 0x8000]}, 0x5c) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001997000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x5, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000]}) 18:12:39 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@mcast1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x5, 0x3, 0x500, 0x8, 0x80000, r3}) write$evdev(r2, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x17, 0x5, 0x20}, {{}, 0x15, 0xfffffffffffffbff, 0x6a}, {{}, 0x15, 0x0, 0x8}, {{0x77359400}, 0x3, 0x9, 0xa00}, {{0x0, 0x2710}, 0x12, 0x5, 0x5}], 0x78) 18:12:39 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x0, 0x4000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f00000000c0)={0x3c, 0x11, 0x17, 0x4, 0xa, 0x2, 0x0, 0xf0, 0x1}) 18:12:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc90001999000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:39 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006900000004000000010100000000000006000000000000000200000000000000fcffffffffffffff000000000000000000000000000000000000000000000000ffff0000040000000900000000000000ffffff7f00000000ffff0000000000001e950000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000efffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a9b120267c7f02b600"/576]) r4 = semget$private(0x0, 0x7, 0x188) semctl$SEM_STAT(r4, 0x4, 0x12, &(0x7f0000000500)=""/244) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x14000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40080) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000600)) 18:12:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) [ 2091.362957][T29480] binder: 29476:29480 unknown command 1141138182 [ 2091.400298][T29480] binder: 29476:29480 ioctl c0306201 20000240 returned -22 [ 2091.420330][T29480] binder: 29476:29480 unknown command 1141138182 [ 2091.428599][T29480] binder: 29476:29480 ioctl c0306201 20000240 returned -22 18:12:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x6, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:39 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101680, 0x109) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000040)={0xe, 0x1, 0x100, 0x4, 0x51, "d86d3c73d50eb7f1f40a809d95e2bbac5c3cb184dd1afcbc62d3c43f34beac065f16e741799bd47641f6a34851d6c8a93da07fef317add93d54835503f1f3080f30cc3c61adc07feaf33dad5fd2681a0c7"}, 0x5d) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x0, 0x200, 0xff, 0x4}, {0x2, 0x0, 0x400, 0x9674}, {0x400, 0x8, 0x1ff, 0x8}, {0x8, 0x490, 0x2, 0x100000000}, {0x8000, 0x5, 0x89e}, {0x80000001, 0x1000, 0x8, 0x20}]}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:39 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="045882400000000068d32239fd7124280bd325c0025f32438c763b139ae1cb5209c62f11515d6be803f83f91dcff391e35d153d3315ec62619d5275a"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000199b000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:40 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) [ 2091.781755][T29499] binder: 29497:29499 unknown command 1082284036 18:12:40 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) [ 2091.831420][T29499] binder: 29497:29499 ioctl c0306201 20000040 returned -22 18:12:40 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'L-', 0x9}, 0x28, 0x3) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000000)={0x2fa, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc9000199d000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:40 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x100, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:40 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 18:12:40 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019ab000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:40 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2093.919152][T29541] IPVS: ftp: loaded support on port[0] = 21 [ 2094.059789][ T5053] device bridge_slave_1 left promiscuous mode [ 2094.066329][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2094.139140][ T5053] device bridge_slave_0 left promiscuous mode [ 2094.145294][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.851104][ T5053] device hsr_slave_1 left promiscuous mode [ 2095.893816][ T5053] device hsr_slave_0 left promiscuous mode [ 2095.954252][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2095.965815][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2095.977182][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2096.022465][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2096.103609][ T5053] bond0 (unregistering): Released all slaves [ 2096.227812][T29541] chnl_net:caif_netlink_parms(): no params data found [ 2096.258165][T29541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.265333][T29541] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.273326][T29541] device bridge_slave_0 entered promiscuous mode [ 2096.281891][T29541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.289095][T29541] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.296686][T29541] device bridge_slave_1 entered promiscuous mode [ 2096.315651][T29541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2096.326884][T29541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2096.354762][T29541] team0: Port device team_slave_0 added [ 2096.362698][T29541] team0: Port device team_slave_1 added [ 2096.420362][T29541] device hsr_slave_0 entered promiscuous mode [ 2096.468928][T29541] device hsr_slave_1 entered promiscuous mode [ 2096.558041][T29541] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.565093][T29541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2096.572471][T29541] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.579580][T29541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.616193][T29541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2096.631497][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2096.640388][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.648145][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.669335][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2096.682952][T29541] 8021q: adding VLAN 0 to HW filter on device team0 [ 2096.695322][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2096.704147][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2096.711257][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2096.735618][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2096.745389][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2096.752504][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2096.780079][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2096.789093][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2096.798074][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2096.811879][T29541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2096.824460][T29541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2096.834506][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2096.850836][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2096.878106][T29541] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:45 executing program 2: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x400, 0x2) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r2, r1, 0x0, 0x80000000) 18:12:45 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000), 0x75, 0x0, 0x0}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200001, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0xffffffffffffff8b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="066304400000004937af6285caeb086c3e639cebd6f700"], 0x0, 0x0, 0x0}) 18:12:45 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 18:12:45 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x7, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019ad000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:45 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80080, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000040)={0x23, 0x17, 0x5, 0xc, 0x2, 0x8001, 0x0, 0xbe}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2097.226444][T29556] binder: 29554:29556 unknown command 0 [ 2097.260620][T29556] binder: 29554:29556 ioctl c0306201 20000180 returned -22 18:12:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019af000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:45 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 18:12:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="066104400000000090359d406ae5e68865b2d02c5a37698c250c4e12b46f2ebd391ede1fc9c6"], 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x101200, 0x1) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 18:12:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019b1000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2097.558606][T29582] binder: 29579:29582 unknown command 1074028806 [ 2097.565059][T29582] binder: 29579:29582 ioctl c0306201 20000240 returned -22 18:12:46 executing program 4: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000180)="457135480055ebede64bc75fb9907846f185f761261ed4d82dbbf0e2ba05039c66b8db62097725c8a7e5e48adc9cad135da1ec5bf8466275bc51f943bdf094e9286660f2b080057726879e08") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000040)={0x2, 0x7a, 0x1, 'queue0\x00', 0x2}) 18:12:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019b3000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:46 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 18:12:46 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000140)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x3b7}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/netlink\x00') preadv(r0, &(0x7f00000017c0), 0x3da, 0x59) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000000800)="89a2c7fe0f1dc325a3bf5c0f95fd08b49b2e67867430a7d54cfbb098efc78bfc3939647779dc481fee7f4a5d8cb8019dc84234925ece02600f96d03df064dacc2da1d9839c28384804c73632408cbc60ad39d0e20e8fd29c0932f832dd8e684c0d6395a1487c8d2f0adb36f84e5578cd42920c1b04aaf98c47ae6cecad1eff32c6823bfec56a4140feed17efea0264c4f95936dc6ae7c159df76c8cf934b275a8e624c341d0964aa91ca6a630226c31ee8215e59a78c38944b62d7b259c16af1349d8be3767cfa941ca3677641c87f390abd92aaa9036f2ec96aeaa5c7c56034a10e8126d4c95f1ed740c0b9adee9b100218d14b9aff3ee948c4c411fb182b908633e210a945c6d51468917858861fcd017e8c7e3d63dbffc79cc4f51963772e0370bde673d0d7b566a1fc6043a0ed64e5d8980723fe5f63c6b711d53c92f9be9bccc46c617e2b58268dbd91be5c135430fdba7a2bf4c40874e86ac59469c1b4bec5d54b41e3ddeb914fd1486f336f115d114cd1874453b82c6927408bdb016c0d705086f5d9f9596d1701d6a801c39cc064cce3ff24aee02643dfa1e04264f906a74a2287db75e2c22021b41e3332f0539e132cc481bb537fa95b46a5b1461e92cb009d25bb3673a65107ce67687524df7ef0515e4c64aab5faf77328414398630c042db89fc4305f8ac46448ba580f4e5cf6bc490c6c8c84ff1cb41634c614c070bcd60cf11f4b83e0b51fda0a424fc4610fa910e85cca7fc688b8f4d789d551d4e0c53f1104ba75ea7a7c44652232809c356d95e1b642b9133b225a7823c9cb69bb05e94e2cf58c91cdcef302b72fd835f9e320528fd8f40e710a3a8b539cf6f8fcc998ee1a67c8d1f7ffc39c1d5de3264b4a7ce9b829e642e7c00ffb30a94ac188c6adcf64413876c6b4f98c79c9ae4203ae55f73908ef3e54f13b82cdf03e99e7690c386cb2a85d751f2d9ca31232d68a59b15a787f14bb52fe4386804053e9405ca951b1c62eb6a2a99b1e7e89b09ee605481f477d22123eb4ec679a3ca61b7db5bca08d6297cceae1758c063cf299e86f147af8a3a6285a57af6f14e6719b9114c5aeb6fd56ef631fdbda52af351ec9646245856bad5a930ee045fb76ed504486260b7d786de63dca8074109492e37f8ac8ae3fce2460904242a499c34002c20a37f4ff8e827acce811f68825e29cb55504283775ba50a3c8e71e923d62bb45a328e728a4408687ca905959551a8376392c73eee2038dc611633acb20cea00cbe1a539e1fcbe3a22a60fc601681e3c9acc40c332af8494b0247f34b149672ae642d814f6096adcf134e4ed7feeef814125dd041e19b13230988ef5162d70722cc3c8f4509cee503c232b397de51a0bac7a0fc0add2f56f62d859c8a8cfa0025dcdf4178b59423e9e6b6af035ba072fe7dda6a80b3a5766dca23d9860ce43dbc704b8a5cbac3c7dd788be260688585c75595810236a7b23509d121f8e57b36bcef1f99b92cbdb528fb775669dbf5dda1a3d28ab532736559650bc40d74a0961138298ddf9f59e9c4d9fc9bb4e82036be0b16a380838d9f2fe31cd80a48969f72c1472473ba566f6f7dd2296e579e7264568c85b2a86ac93e7ba21a2eaa29fb48b64a312e63cd7e090a76856c4bbd030ea1a0d19658320606fda283c62b7f3de8b2faf102bfbbc6183e04fe22244a9055cfb7bc59446e07b70a9fa2eacef6eac1ac0178370ab29312e6a6a64c358823529fb5f5b92c4cb6a612bd625ce2a0d9666897043e4253f60befbafe6638cefdaf7ad4194a68f3e915246984a041f587dc0bb5461d28111b969b67c7ebb9e36e966ecac309707516c620ff0b22b352c5e171a7464831ec4a5bd12750aaa983623b040e6716db3ffb6a1562129210f772935e445fed4dfe5d46cef21201ff0d890625b2213185c8b340744910822683b14a84b9cda1d772f0bf0abe6f883f676003d506cd8f2115ea7e50c3cea05ba8e3f88b6109fe208ea893bfefb2aec18ea98511658aff52c45dc04caf1049ad4d7f0d45959f5f19d2ffef18f32ba9a8c83592eddb3267bc105f8e005d973c85df90337eb7e0609acaf6d14863f9f705526c23ed20f05a3b9778a4762172c71ad694e26df254158410eee1060f1e78dec569862b74ca2e368c9ff952e20613fdab7c61dcfc2479e016c3fd637241828e3a099a3adbf727b83b34251e8ab829c2c0063ad3fd0fcdd85678d8f8d497e974540c8d816eb2237887e277e06eb1dca4aaa93f1b46861cabfe28e220c5666d3283f6ef6dc9c41393c46c286aa8781fe53ccaf951b00edbf44da52ccc56a97907ab4a07df06bb03488aa8f9902cb7540375234f226ebff94dd63ee5f5a62caa95384a87cb16173b7185e80d9f83fd274f58a0e1af9e4429593b8837bce763f86ae30c8b24e81623edb801e30cf0fd7340483af6d9114eecbd2c7fdc612accefdaf744e6bf046988ca630871736392a421019b226e1f4e5427baa1831afb8ebd841ee435823e88ac488b16ec838ad64af81bae1c801d7789eafda5defd51052a5d8d014c18995568e8e8cecd9d055d107879fbb69cb21301da4b4e1bcbc5d7edb2e613a5f0c9b63c198efc8b965b30798a4dba742486acf5776e93d232dfd4eaaba25a24133490ef1095144d4ca465a863ba5f01a5b4e6ed25ae5a078f3193310254d338c315ba7f510b14c62bd7795ccbcd8cbcaf264eecf092e57920e0d660d865b1285e8a859a384940534807383ca108cba8cb2b036439cfcbb7ffb184fc35d85ec693d0cfcaf20c7cfc80cd6a897b1b2e9145f189ee96dd780ca27b783ddaa14b10fda6a17002a8aad09f2fca2797bef0d048c8028a1672f6c76126115432ca87ac88f81fa018857aed332a453b0b042b29cb229ea17f487a2edfaf347f122dad9bf7b3843399498ba53b958d8b0aedc18003f9f9f033deba163196fd6362e49de9d68d0c4f9953f0c53c3e8cf2c346c8809744de3b4c086f039bb4d40e3ff3d3e6e9eeb5e3821667e5b538f2d2962803372038ae7105d39277c08e26f4e26d5599dc9cdb9f295ad37992475b56f2088ea736d3e292d6c9e30c9ac2c1edb0d85a0e2a614ac774d30ac6e7d2bd7b0b81a5cc6ee5a63099612b6119af756bbf97f73971903e9729a6f7365f78d06a39ffd1af76a2abc4189739485329467235c6220e9701f5d2783ed7083859d07cb3fef06e7ebda0ee47408ea076ccd96060e146bbe66004740ffe80964b5e4e60acd2ac364acc2278dca1bc37d59723af1f18904f12e2458b5a802c871fdd2275c74d2487ac469f42601926eccf078468824fd480846c81c4533b502e7ac43a1f65fd070b0824e133093ad60bc1cafb1110a87c4abf20f027c663f4f38e71fecc29ed0f540460789fe027f46537ba63506097741cd076a19659d3a1307d1e9e9f6ede23f24cf09eb6eb78759f3e6a350d3c05ad7f70ec0ffc20d3557968cb3c4b3b6b4c7f94d657c13507a53da6bcbd681e65a5b801fed4b7c6adae78057f57d9251f989ced587d644583ad8667f3aad3be0c3795c53022fccf2c5e6520cd86123fc182d134e6eee5655eb8f8e90fbaa8e264264ef80358d8378794d6a8af097b682c8911e6eac53e43dbb58047cf5b83390a993f061a961485599e3c0540219ecb4ea9d5419cd1dc69d38cce03981afd16125d212e4eb6a2ea0beac51c9a2f1c27731f1d4986f798374a03b2558b186deaedaa8f0428c5f9b884280a35060607153cd1486c5dc26f6f4192d3a2c3f011fad7890607899412e96bcd30fbc4456e3d21177715c966d47513ead2c77b8100830bc8fa7f583f3809db3db1ddca5cf853058645c34f285c0490d6f02e3cd97c3e0f52366e49b9d9d89ded5a76988f5390219cc6f1af70da8a59256f062c733a467bb97539c9f8a6be18fc40cec24a9cdb4db36d68a7c2f8c6b339f927e2bb37ea9acfad337ead63b870259fcaa68bc52a873194339e34f23a63e9ad861d1ac8126065fba12581eee43b1115f8173995820bba0fe2b2dfafacbea2f1664bb25665ee5c40d7366e4a1a40dbc527d314cdfc0780dbdfce3cfde279ab6092f6fa8ffd6d2f067d4efb0697b7e04e11a3ecc4409623f55c26a0a29b74bcfea159b6251fa58ce42bb2e91df09bc8b1b1c538b75e1e5f364ca7cbf52c0f589c387f2dc8bd12a29be4968db910c6426497019ae7fe8b17d11e608c4872e0e7fe7cd9dc6ca1d04f4566b476eebff98465622d0803694e645797e6e99900cd032415d9e9efeb043e6c3c9246c9ad2c89a38da5cbe2186a6d0565d87fe41f33b83baa03d087a289cc245a78a4e3cc1b2ca1c4642df7a3371963838a40e36a5eadcb5c870fa92ad04032930856fba0e8dbee2cddf640e8aafd52541f89c67292c17908a3ebf8a2b9a07f4004afaedb0b23c2bfed5ef117e7bf9126c51cd4a9d338c5d4e17cf632225678df37a67485764f53109b7163bb877e15f0438c3fe24d38271e6d2626cfd9d52a0ff33b25fb39b1c13ec2f78174c97bcd80fc8f52f07d69cb4acbc34ecabb408d840349b60016d57436689c543cdd2fec22db2fc503147897f0af6f84d4a81b1bf9e45a44cd9bea1c0582e1f1a87218bca22824e52f52cd2729523e03dbf3546ce02cf9d205cdfefee95b472711037c5336a366bbdd98fe501e0fa64fede165ec5da41088c05ce5950506fc248c28cf8f7382d5a974a30c5bdd9ee06c06f66d87ad3d63198158b92364ebdb9fcac69631e104e2e054c558e21ba0183dbca120371b4cc648df6ed2903c533fc6455627092702fd766114044ba47a24488ce695f310d428d545ce73036b5fa6a67e63b78a171429e1d86e23d6712b6483c32083203b7131707af462303f5802a83189e9b8ddeea2e8e39e2a180df0195c70d0095304ef46aa92cc42919e5e99bf554a971f5bc1002c2fac77676b31f799c16be3ad3a1ee2c67ce463893add74af1af89d77429986f5b9899a8c76bba800973457436f8b451481f7047eec610a9c213a29a014ab2125e15e6a367e16230539b49f60eac35c77811ffd9652b8f6a4da04b2844de9ed8368a75a616ee2739df4dc6e3544e97195a2f9086e88e6a24aba6b4d056e96d764e6847ccefd4ddbc6a40933d3c328cd900cde68e587e78231a829a6850f9a31e57b97a97c930cdae250117a8182cce6c9928eb6c9b0d272c77fa54a187d50b79333f299cf8b7b08d177be954b926d10c9cab45d4fb3686b4c2ec173d73fc538a4033c6d6bd42a50a462d20929bc8d9d7df30760ea056be230442f61301820c4ef7dcb9117731b55cbe1abc37757023686a27fff8703dc95b3214081d4f0c75dc413b50b81f660034389f022ad6a7ebe822e6b4ad84e6e3d1cca1302d840fede3692ebc24e49afb0d45762c7aea45d62223bb7d3a19f1a6b60e269a1c13c1a89608bfab6ee45c23dca4df620ab68a72ebb1f53c460e44fd31b100d98105e68cfa1e76f2031c1c6e97d3d0fd72d316768dd32e48366294474edca205d69762ae3ab280b2f86f42d3670120d16042a2023f141612daf839030660b1fa1ee0457755b6c9ee99367903f78beed2df756e16939ebec16febb661ad3980eef774f744e648f229679f0cca627ed4ef88e24050d1812d5ccaabe13f196fa89dc302bba03ff92f753056529b36e17d923710541f509bef0cefd761ac1d32f9936db8b80e30ef5c55571b2675f59d3a460bc452237d7b976e64bdaf90835cd72a9009b0c66a220598357c968cbadedd36606c786a87002d57d61ace36f061f", 0x1000) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") fcntl$dupfd(r0, 0x0, r2) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x400100, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)={0x0, @aes256}) sendfile(r1, r0, 0x0, 0x80000000) 18:12:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x8, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:46 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) 18:12:46 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r1 = accept(0xffffffffffffff9c, &(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000640)=0x80) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:46 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 18:12:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019b5000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x9, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="04630440e7ea009a2ae37369ab0af117522bbd0e6b33598b6112f480e5f3fc653791e73bfc75ae22f8a4b5ca9211f1eff9d12333f5ffff0000000000003cfe0b0b22128abbb4f5d9d7dc599ba3227cf411dd720f83117f7d4ed865e5d504ff25d6ea008e2e42da2e959e9746dd7487db504ec6963fb403c70c61a0b237899fbe595eb2ee814aed7271c5f0aefd00"], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x3, 0x0, [], [{0xffffffffffffd299, 0x8001, 0x1e3, 0x9, 0x9, 0xfff}, {0x8, 0xc217, 0x64, 0x8, 0x8001, 0x4}], [[], [], []]}) r2 = socket$inet6(0xa, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}, 0xf370, 0xffffffffffff0000}, &(0x7f0000000200)=0x90) prctl$PR_GET_KEEPCAPS(0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0xc, 0x0, &(0x7f0000000080)=[@dead_binder_done], 0xa2, 0x0, &(0x7f0000000280)="ac77bee622a43e4e3d32aee8b30b4a5143fc1fea8fb3bcd2eaf8972ecfb93a22911a6b4378159d6cf3e3793c758c4491f31d7939fb18149a7d4e9f5c30fd8b5035e3fd14f04f70a0079db3f8806ecfe9484bed0676c68bcf082c2ff591992aa6f25c6e092748ef788486c4fe0e1c42530a7794012637e8d8420b6c26b08f10a70a51f8b63a148ec948ea40f3db0d2d42e0f24157dc0577a53355cbb874ab896cdec8"}) 18:12:46 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/68, &(0x7f0000000180)=0x44) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$getregset(0x4204, r3, 0x3, &(0x7f0000000280)={&(0x7f0000000200)=""/6, 0x6}) 18:12:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x1, 0x0, 0x10000, 0x9}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000001c0)={0x4c2, r1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, &(0x7f0000000200)={0x3, 0x9c, 0x2}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x8000000401) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000240)={0x0, 0x0, 0x10001, 0x7f}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r6, 0x401}, 0x8) sendfile(r2, r2, 0x0, 0x7ffffffe) 18:12:47 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 18:12:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019b7000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2098.570907][T29627] binder: 29625:29627 ioctl c0c0583b 20000480 returned -22 18:12:47 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1, 0x5b) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$invalidate(0x15, r2) 18:12:47 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0xffffc900019b9000, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:47 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}) 18:12:47 executing program 0: r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='/dev/binder#\x00', 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000180)={r0, 0x57, 0x46}, &(0x7f0000000280)={'enc=', 'raw', ' hash=', {'sha256-ssse3\x00'}}, &(0x7f0000000300)="13e3d21be495feb9a1a8d1a1d09663f61a53568ae2ea9ba059069ed9059c953574a91398eed918c5cdfe5451d59cf01dd86c1561a56d2f683a314745e02c3e940a72ac9a8225c54cbde1b7465e9941c9d3ae888f9dc996", &(0x7f0000000380)=""/70) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:47 executing program 4: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r3 = getegid() write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x0, 0x3, {{0x4, 0x1, 0x8001, 0xfffffffffffffff8, 0xa6a, 0x5, {0x2, 0x7, 0x7f, 0x3, 0x0, 0xfff, 0x80000000, 0x4, 0x687, 0x4, 0x9, r2, r3, 0x3, 0x9}}, {0x0, 0x10}}}, 0xa0) 18:12:47 executing program 2: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000001c0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/arp\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000200)={'team0\x00', r4}) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(0xffffffffffffffff, r1, 0x0, 0x80000000) [ 2100.724872][T29678] IPVS: ftp: loaded support on port[0] = 21 [ 2100.923558][T29678] chnl_net:caif_netlink_parms(): no params data found [ 2101.017609][T29678] bridge0: port 1(bridge_slave_0) entered blocking state [ 2101.024973][T29678] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.033178][T29678] device bridge_slave_0 entered promiscuous mode [ 2101.042183][T29678] bridge0: port 2(bridge_slave_1) entered blocking state [ 2101.050035][T29678] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.057996][T29678] device bridge_slave_1 entered promiscuous mode [ 2101.066423][ T5053] device bridge_slave_1 left promiscuous mode [ 2101.075135][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.139213][ T5053] device bridge_slave_0 left promiscuous mode [ 2101.145406][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.941557][ T5053] device hsr_slave_1 left promiscuous mode [ 2102.985311][ T5053] device hsr_slave_0 left promiscuous mode [ 2103.044327][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2103.056197][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2103.068094][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2103.125798][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2103.194830][ T5053] bond0 (unregistering): Released all slaves [ 2103.304493][T29678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2103.315208][T29678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2103.337355][T29678] team0: Port device team_slave_0 added [ 2103.344559][T29678] team0: Port device team_slave_1 added [ 2103.410091][T29678] device hsr_slave_0 entered promiscuous mode [ 2103.448730][T29678] device hsr_slave_1 entered promiscuous mode [ 2103.544311][T29678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2103.575176][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2103.591770][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2103.607424][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2103.620615][T29678] 8021q: adding VLAN 0 to HW filter on device team0 [ 2103.639484][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2103.654520][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2103.664668][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2103.671769][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2103.704712][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2103.713336][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2103.730894][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2103.745826][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2103.752930][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2103.767530][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2103.800071][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2103.815875][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2103.826441][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2103.843075][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2103.856971][T29678] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2103.872484][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2103.914175][T29678] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xa, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2462f30f0463044092ce887d"], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x5b) r2 = getpgid(0xffffffffffffffff) ioprio_get$pid(0x2, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 18:12:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) 18:12:52 executing program 4: r0 = eventfd2(0xdd, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:qemu_device_t:s0\x00', 0x23, 0x3) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/wi\x01\x00less\x02') getsockopt$inet_mreqn(r1, 0x0, 0x0, &(0x7f0000000040)={@multicast1, @initdev}, &(0x7f00000001c0)=0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r1, &(0x7f0000000300)="735a05ca6df1e534e446a69225d7e65b96730696eee5590717aeebdce4babce61b2c4ac0aaeea185f9d3ce447b214c1051d01579f22d1e0bdb42bc791be373e0a1b6d4780a74f8b4e9a8", &(0x7f0000000380)=""/125}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0xfffffffffffffef0, &(0x7f0000000200)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000280)={0x2, @time={0x0, 0x989680}, 0x4, {0x4, 0x3}, 0x7fff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="bedca505710bcfe87be070") r4 = socket$inet(0x2, 0xe, 0xbe91fcb) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x8000, 0x0) sendfile(r1, r0, 0x0, 0x80000000) [ 2104.358928][T29696] binder: 29693:29696 unknown command 267608612 [ 2104.383722][T29696] binder: 29693:29696 ioctl c0306201 20000040 returned -22 18:12:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:52 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) memfd_create(&(0x7f0000000140)='/dev/snd/timer\x00', 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0x0, 0x0, 0x1}}) 18:12:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xfffffffffffffd7b, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:52 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10001, 0x8000) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000040)=0x7) 18:12:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x6, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:53 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="f48b570d55f055e849b34000"/23], 0x0, 0x0, 0x0}) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x2, 0x4, 0xfff, 0x2d, 0x2, 0x3e, 0x5, 0x3b5, 0x38, 0x9, 0xa75, 0x1f, 0x20, 0x1, 0x6, 0x6, 0x2}, [{0x2, 0x7fffffff, 0x5, 0x9, 0x2, 0x3, 0xffffffffffff2789, 0xb9}, {0x7, 0x1, 0x4, 0x7da3, 0x2, 0x8, 0x5, 0x27cd}], "0fe0e87a2b39faba8bc40876357cbe2b78b000aec1fc9f9839c2a9ebfa865f0acaa6f2092be25963afa8fd857f5dc1015aa93ade0e589d9715190ae4c648d3f1d12f1462a3af75fe18c70a9853e05cf14b05bf6969d253a6ea3760106d36fabbc9cf88f1fc873a195979d4fb2a", [[], [], [], [], [], [], [], [], [], []]}, 0xae5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) [ 2104.963301][T29732] binder: 29730:29732 unknown command 223841268 [ 2104.989595][T29732] binder: 29730:29732 ioctl c0306201 20000040 returned -22 18:12:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:53 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xa7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={r2, 0x7ff, 0x7, [0x401, 0xfffffffffffffff8, 0x0, 0x6, 0xae, 0x7fff, 0x5]}, &(0x7f0000000140)=0x16) 18:12:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x8002, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x12, 0x28, &(0x7f0000000100)="2eba39723528cd0deb4a88a6b07fe2c1091abd3a0a63adbb7771ac725b9a6ac71f7397703652e8af"}) 18:12:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:53 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="9197574e39484eb55cde1fda965f0de8e120a73d8cb317d8d106dd7b9168301b587309dfb3d6fee838c7994d75f3ecd7d37cdf5111", 0x35}, {&(0x7f0000000280)="c31dc5b979d45d498b3c62d0050a328cbff75e4cd6234e0c64fd67514a260a2b9a68aca63fcd7d5caf1147cbf024cfc8aa37032177d9f3b13049ef3d29fda75129abb2a9da19b6fba1dc2419237b3c1e743f9bde7b855763d1aa84f6bd35467c20041a94230c34be4e0af9cac41b3fc1aa6b2f7b92c025d7cca7c452d8361bf2ffdd02aead2d108e718bbaf72096f246d229987c8b6c147a494d929219a7fe4f942011ada574f4efe624b9331282442d0e74e8fb169db911111577f05f4dea8c48b3f49e0fa4e859fbc0e30ec5917c4192297c976ad6f382c3906fd6f3c8a42df9a11f2b81d28fc61ab11e60fa", 0xed}], 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000600)=""/72) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r3, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000400)=ANY=[@ANYBLOB="7f000000e5000000f36480938ed3276fd0aa39e8ca7dfda410c7c62b24ffdf12b64366789ba682c58c2ac148bf3777ca8c5ec4ad9eb11c5ea24c46f05b7459a60fed3f71de5750b5e614e9a231d9350bf9ad407f3c57dbbd960eef4eee594354510b5f34e1cf85688c1ee31861ad491668f0393a9d3dafec44e9d6a3ea90b93cc6566564de5d3f1e066b22b9b9890500000000000000b1f4f9b67f6295e4326a838113601b6f5ab74fd3c3c35be32bfeccb0434d3dbc0524033830703ac60cb1710ff87648955a3e423a9577d154c9716d2523aebc575ca4e350239b3779bee8e104eea18f"]) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000500)={0x3, 0x5}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = fcntl$getown(r0, 0x9) ptrace$getregs(0xe, r6, 0x4, &(0x7f0000000380)=""/117) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000540)={0x0, 0x4, 0x9, 0xfff, 0x5, 0x2}, &(0x7f0000000580)=0x14) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={r7, 0x6}, 0x8) sendfile(r1, r0, 0x0, 0x80000000) splice(r0, &(0x7f0000000300), r0, &(0x7f0000000340), 0x81, 0x9) 18:12:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setstatus(r0, 0x4, 0x2000) 18:12:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000280)={'#! ', './file0', [{0x20, 'proc\\'}, {}], 0xa, "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"}, 0x1012) r1 = syz_open_dev$binder(0x0, 0x0, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x80000, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0x8f, &(0x7f00000000c0)=""/45, &(0x7f0000000100)=0x2d) 18:12:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:53 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x200, 0x81}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x4, "911b7cbf"}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={r2, 0x0, 0x39, 0xfffffffffffffff7, 0x8, 0x7ff, 0x5, 0x9, {r3, @in={{0x2, 0x4e20, @loopback}}, 0xfffffffffffffc01, 0x7, 0xfff, 0x9, 0x8}}, &(0x7f0000000280)=0xb0) 18:12:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x300, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:54 executing program 0: syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0x0, 0x2000800) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x400, 0x0) bind$nfc_llcp(r1, &(0x7f0000000400)={0x27, 0x1, 0x0, 0x7, 0x8, 0x7, "cc5e716a95cf6dabdc039b398a2a745af6db242693cebeafdc0181c2a9fffbf55ec7de694418681924a4d4c8db35dee1c66697a44a701dc84adb8c9405c27c", 0x26}, 0x60) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {r3, r4/1000+30000}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4e22, 0x1, 0x4e23, 0x9, 0xa, 0xa0, 0x20, 0x2b, 0x0, r2}, {0x7f, 0xffffffff, 0x5, 0x100000002000, 0x9, 0x1, 0x8, 0x7ff}, {0x8, 0x9, 0x9, 0xfffffffffffff801}, 0x6, 0x6e6bb5, 0x0, 0x9103d88dc963562e, 0x2, 0x2}, {{@in6=@mcast1, 0x4d4, 0x6c}, 0xa, @in=@multicast2, 0x34ff, 0x0, 0x3, 0x9, 0x9, 0x100000, 0x1000}}, 0xe8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000480)='./file0\x00', 0x521002, 0x10) recvfrom$inet6(r5, &(0x7f00000004c0)=""/91, 0x5b, 0x42, &(0x7f0000000540)={0xa, 0x4e23, 0x230, @ipv4={[], [], @rand_addr=0xfffffffffffffffc}, 0x2}, 0x1c) 18:12:54 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@assoc_value={0x0, 0x101}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={r4, 0x4}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r5, 0x3ff, 0xbd}, 0xc) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x2) 18:12:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x9, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f00000001c0)=0x73a) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:54 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:12:54 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="006e00003041ab6dacfb9dfcf7d0b22bac215d00000000"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:12:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:54 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000100)={r2, &(0x7f0000000080)=""/115}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) read$rfkill(r1, &(0x7f0000000180), 0x8) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000001c0)={{0x2, 0x4e21, @rand_addr=0xa55}, {0x6}, 0x54, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}, 'tunl0\x00'}) ioctl$BINDER_WRITE_READ(r3, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:54 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x2}}) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1f1401, 0x0) write$cgroup_type(r0, &(0x7f00000000c0)='threaded\x00', 0x9) [ 2106.178917][T29790] binder: 29789:29790 unknown command 28160 [ 2106.208310][T29790] binder: 29789:29790 ioctl c0306201 20000040 returned -22 [ 2106.248801][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2106.295826][T29801] binder: 29789:29801 unknown command 28160 [ 2106.329006][T29803] binder: 29800:29803 ioctl c0086420 20000040 returned -22 18:12:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xb, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2106.370457][T29801] binder: 29789:29801 ioctl c0306201 20000040 returned -22 [ 2106.404752][T29807] binder: 29800:29807 ioctl c0086420 20000040 returned -22 18:12:54 executing program 5: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x3ff9) pread64(r0, &(0x7f00000000c0)=""/11, 0xb, 0x46) r1 = syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x0, 0x400) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000680)={0x4, &(0x7f0000000600)=[{}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) [ 2107.799445][ T5053] device bridge_slave_1 left promiscuous mode [ 2107.805740][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.859355][ T5053] device bridge_slave_0 left promiscuous mode [ 2107.865742][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.511483][ T5053] device hsr_slave_1 left promiscuous mode [ 2109.582036][ T5053] device hsr_slave_0 left promiscuous mode [ 2109.621798][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2109.635249][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2109.646540][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2109.695928][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2109.785590][ T5053] bond0 (unregistering): Released all slaves [ 2109.896917][T29821] IPVS: ftp: loaded support on port[0] = 21 [ 2109.968117][T29821] chnl_net:caif_netlink_parms(): no params data found [ 2110.004477][T29821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.011865][T29821] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.020049][T29821] device bridge_slave_0 entered promiscuous mode [ 2110.028012][T29821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.035271][T29821] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.043203][T29821] device bridge_slave_1 entered promiscuous mode [ 2110.066077][T29821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2110.077128][T29821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2110.097334][T29821] team0: Port device team_slave_0 added [ 2110.104749][T29821] team0: Port device team_slave_1 added [ 2110.221225][T29821] device hsr_slave_0 entered promiscuous mode [ 2110.259387][T29821] device hsr_slave_1 entered promiscuous mode [ 2110.309839][T29821] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.316932][T29821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.324394][T29821] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.331567][T29821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2110.411002][T29821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2110.436621][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2110.452396][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.464632][T14653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2110.486524][T29821] 8021q: adding VLAN 0 to HW filter on device team0 [ 2110.500597][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2110.509571][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.516645][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2110.547631][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2110.556750][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 2110.563919][T14497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2110.594382][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2110.605009][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2110.627857][T29821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2110.645881][T29821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2110.666753][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2110.675306][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2110.692007][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2110.718625][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2110.744274][T29821] 8021q: adding VLAN 0 to HW filter on device batadv0 18:12:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4d93, 0x3, 0x1, 0x8, 0x7, 0x401, 0x80000000, {0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0xdf}}, 0x6, 0x7fff, 0xffffffffffffff01, 0x9, 0x1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="090200000000"], 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffff9c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket(0x1, 0x1, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) getrandom(0x0, 0x0, 0xffffeffffdfffffb) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x20}, 0x1c) timer_create(0x3, &(0x7f0000000100)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={0x0, 0x3}, 0x0, &(0x7f0000000180)="c3a5f0", 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:12:59 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0463041e0000009c0e4eda08abc424fdef000000000000009ab7d9f51db34cb1edffff00006743673742eeaf16db78a383cf79faa1dd27cca4c9c47137bbd130c43b5c5a8737b45c9daff6f0467e8a29e1d0ed556a287d6368524cb654b30f0035e68ef3b9"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r1 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14, 0x80800) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = accept4$packet(r1, 0x0, &(0x7f0000000100), 0x80800) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000000)={r2, 0x1, 0x3, @random="a1a772d414cd"}, 0xfffffeff) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000300)=""/102, &(0x7f0000000180)=0x66) 18:12:59 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x5, 0x6, 0x101) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x2, 0x2}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000001c0)={r3}, 0x8) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x8c, r4, 0x308, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x8}, @SEG6_ATTR_SECRETLEN={0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0x8000, 0xfffffffffffffee0, 0x2]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x100000001}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={[], [], @loopback}}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x7, 0x9]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x181000, 0x0) getpeername$inet6(r5, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x500, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:12:59 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = dup(r0) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="028007000c0001000000ffff004600010000000300c47c0000000005000000020000000000000009a5ee6616c64ef10700a6d40ba1edab90ba5c24f195e6095e114180eaf3f4fbfc56474d68bbf77c23"], 0x50) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f0000000140)) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{}, 0x0, 0x0, 0xfffffffffffffffe}) [ 2111.161984][T29841] binder: 29836:29841 unknown command 503603972 [ 2111.170632][T29841] binder: 29836:29841 ioctl c0306201 20000040 returned -22 18:12:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x1, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=0x10b) 18:12:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xd, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:12:59 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04631d40000cf909"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x800) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f00000000c0)=0x81) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, 0x1, {0x7, 0x1e, 0x80, 0x800, 0x7fffffff, 0x7fffffff, 0xffffffff, 0xa93c}}, 0x50) 18:12:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080)=@v1={0x1000000, [{0x200, 0xffffffffffffffff}]}, 0xc, 0x3) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:12:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x4090146) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x20000000000, 0x0, 0x0, 0x7fff}}) r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000200)=""/221, &(0x7f0000000100)=0xdd) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f00000000c0)=""/35, &(0x7f0000000140)=0x2cd) [ 2111.444618][T29859] binder: 29856:29859 unknown command 1075667716 [ 2111.483474][T29859] binder: 29856:29859 ioctl c0306201 20000040 returned -22 18:13:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=@v1={0x2, "3c92"}, 0x18d, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000001840)={0x7, 0x1, 0x9, 0xfff, 0x16, 0x6, 0x0, 0x8, 0x4, 0x7, 0x4, 0x8}) sendmsg$inet(r3, &(0x7f0000001800)={&(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)="7d54e87ec14f79863d53ac0414b3f32872b342962e74e913b0f61defb949e53b1500660c2b5e6dad9ac03ab9c2a2de0f1c8c323587e9c5c9df3fbb04d803825d01dc011e11ff6792e418cc14bdea4870d0a1c8bd066ac6c425b309a969acf7d4ea09c05075e4d6556f674185f5d81e9eb5ae582c2a95a49c24b0809c75f2a16a7c499bfc54580a7a20977a8a0ac4a556e67dde9bc0cd6db8b23bb3bf3118c46821645339aaebed9e95b4", 0xaa}, {&(0x7f0000000380)="105daee6e5f0fd67c6c70cdff7f62fd45dc725fdaf21d3ceabe8fb6a1b6d13b70b9402ef956c28b971c992b5ed962bee94b5", 0x32}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000003c0)="6e52c8c9f2744875b0917455fd4ab4944d7f8b9eb08137e63085", 0x1a}, {&(0x7f0000000400)="06f55bf188570268fb4afbfb77a88393a256ca155b06d4a0b5da3c6413b633846631840797acb47153ed5b8c20b5c0f1fb82fdb23f36cb64399183b028869ae2ed7c009dc5ad77d04eb38a22b35985c4e03668687cdee485714816f668e8609be146ef64b1606aa60230cd77a5955571a7444ac6e84cf5c0b0226fb0524bd2a97fabb43bf370407ade777428ae8c073704795af6c8da41da3d3d7f930fedf6cadfe7367d99648c23e506caabc678a2617d7ad9efdfe612cfc446b6ee4762be1880b7bcbcf62d08e499f016306ff4e7bc9a6abcdb30f7", 0xd6}, {&(0x7f0000000500)="bddd4426fc7e88a62c599766d62eff986ab19076e66893cc6b9de61d3308aa6dc5b4242984a9b42f66bcc9d203d60303f74b54b575b98675ae8bb6e90ddc94b80bc2d914737b1a26e2c8e2d9db21cfaa5c74961264ef9e448b150a20aaf883939b7223d161f6e2a089260cdda85b05258f90ab", 0x73}, {&(0x7f0000000580)="14451d6ef5d5660b3f544c49bbb9207428241b1c95a649ce8a230f8a4df053cea0eabdb18e46a9fd77ad936b77f5909f23b39f4ca7623032fff1b30013c31e4d7f71255127d0f51a46886980e844bb24fad459", 0x53}, {&(0x7f0000000600)="d0f37f5066e19d49f2cbfafd025d38049a8824e75badaf02fe385d49a645839c02f129e9d67862a2bb0a3b3076b9f8f9ed4ee29e6d278d05129ba8d947a0b7385ebff5df1a304b1ec5257a135742b89ffb6c65bd56dc7b08ab781efecb379843a59bf1eecb30925cf4612d8b6a41ffe5b8132169e99687e6f630cc83d8925b314919d390ef68bd96037642a1adf8b7609d860d4dcb9f229846614fdd5ff968d3ea9d6dcc094c0498275f409635d7a6977b58dd3d0cbf15b1426d590aa10ff74dd8ce06894f48c1643db3177eee31789c7ae9836560739e0424d835d16ec4483bfb1b5165081f8b2db6819ba6b1", 0xed}], 0x9}, 0x0) 18:13:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xe, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:00 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0xa0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x8}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0xfffffffffffffffd, @ipv4={[], [], @multicast1}, 0x6}], 0x68) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x5, {0x9, 0x5, 0x8, 0x0, 0x1f, 0x7}, 0x6, 0x6}, 0xe) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) 18:13:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x9}}) r1 = accept(0xffffffffffffff9c, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x80) getsockopt$inet_dccp_int(r1, 0x21, 0x6, &(0x7f0000000200), &(0x7f0000000240)=0x4) syz_emit_ethernet(0x26, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaa27aaaaaaaaaaaa9100010081000000009605ced100000000000000000000001e00"], &(0x7f0000000100)={0x1, 0x1, [0x477, 0x788, 0xc92, 0x76b]}) 18:13:00 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0caebea526510a54"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x600, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) [ 2112.207976][T29890] sock: process `syz-executor.1' is using obsolete setsockopt SO_BSDCOMPAT [ 2112.216791][T29889] binder: 29887:29889 unknown command -1514230260 [ 2112.255660][T29889] binder: 29887:29889 ioctl c0306201 20000040 returned -22 18:13:00 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000100)) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x9, 0xc8000) ioctl$TIOCSTI(r1, 0x5412, 0x80000000) 18:13:00 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x1a4, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663044000005d90"], 0x0, 0x0, 0x0}) 18:13:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0xf, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2112.517103][T29911] binder: BINDER_SET_CONTEXT_MGR already set 18:13:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x102, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x10, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2112.564876][T29911] binder: 29906:29911 ioctl 4018620d 20000240 returned -16 [ 2112.716023][T29922] binder: 29920:29922 ioctl c0306201 20000080 returned -14 [ 2112.782629][T29925] binder: 29920:29925 ioctl c0306201 20000080 returned -14 18:13:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000002c0)=0x4, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a000400000007000a000200000800005d14a4e91ee438", 0x39}], 0x1) sendfile(r1, r0, 0x0, 0x80000000) 18:13:01 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) msgget$private(0x0, 0x2000000040) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_dccp_int(r1, 0x21, 0x7, &(0x7f0000000080)=0xc3, 0x4) r3 = fcntl$dupfd(r0, 0x406, r2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f00000000c0)=0x9, 0x4) ioctl$TIOCSLCKTRMIOS(r3, 0x5457, &(0x7f0000000000)) 18:13:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x12, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:01 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x0, 0x0, 0x4}, 0x10000000, 0xffff}) 18:13:01 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000000c0)=[@acquire_done={0x40106309, 0x3}], 0x30f, 0x0, 0x0}) [ 2113.414115][T29933] binder: 29929:29933 ioctl 5457 20000000 returned -22 [ 2113.440471][T29936] binder: 29932:29936 ioctl c0306201 20000240 returned -14 [ 2113.526077][T29942] binder: 29929:29942 ioctl 5457 20000000 returned -22 [ 2114.289146][ T5053] device bridge_slave_1 left promiscuous mode [ 2114.289521][T29951] IPVS: ftp: loaded support on port[0] = 21 [ 2114.295467][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2114.349830][ T5053] device bridge_slave_0 left promiscuous mode [ 2114.356102][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.161329][ T5053] device hsr_slave_1 left promiscuous mode [ 2116.203810][ T5053] device hsr_slave_0 left promiscuous mode [ 2116.251735][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2116.266682][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2116.277618][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2116.315702][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2116.414972][ T5053] bond0 (unregistering): Released all slaves [ 2116.610816][T29951] chnl_net:caif_netlink_parms(): no params data found [ 2116.642781][T29951] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.650058][T29951] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.657762][T29951] device bridge_slave_0 entered promiscuous mode [ 2116.665907][T29951] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.673176][T29951] bridge0: port 2(bridge_slave_1) entered disabled state [ 2116.681014][T29951] device bridge_slave_1 entered promiscuous mode [ 2116.703798][T29951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2116.715452][T29951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2116.738476][T29951] team0: Port device team_slave_0 added [ 2116.745860][T29951] team0: Port device team_slave_1 added [ 2116.811140][T29951] device hsr_slave_0 entered promiscuous mode [ 2116.848502][T29951] device hsr_slave_1 entered promiscuous mode [ 2116.948338][T29951] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.955401][T29951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.962832][T29951] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.969953][T29951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.018030][T29951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2117.033835][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2117.042881][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.053571][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2117.077422][T29951] 8021q: adding VLAN 0 to HW filter on device team0 [ 2117.094656][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2117.106939][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2117.114044][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2117.139470][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2117.147848][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2117.154948][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2117.179566][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2117.188817][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2117.197654][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2117.211828][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2117.224448][T29951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2117.236760][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2117.276935][T29951] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x700, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x14, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x80000000}) 18:13:06 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) exit(0xa132) 18:13:06 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x20000000000000) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000080)={0x2, 0x1000, 0x6, 'queue0\x00', 0x6}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/244, 0xf4) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm-control\x00', 0x82, 0x0) sendfile(r1, r0, 0x0, 0x80000000) mq_getsetattr(r0, &(0x7f0000000040)={0x5, 0x40, 0x7, 0x7f, 0x1, 0x100000000, 0xfffffffffffffff8, 0x4f6}, 0x0) 18:13:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:06 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x50000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)) 18:13:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x15, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x260840, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0x100000000, 0xfffffffffffffffe, 0x3, 0x5}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x0, 0x30}, 0xc) 18:13:06 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$pptp(0x18, 0x1, 0x2) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x96500, 0x0) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f0000000180)=0x401) geteuid() 18:13:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x19, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x900, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0xffffffffffffffff, 0x5, 0x7, 0xba}) set_tid_address(&(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:07 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) waitid(0x3, r1, &(0x7f0000000040), 0x80000000, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0xe) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0), 0x2) r3 = syz_open_dev$mice(&(0x7f0000000940)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$GIO_UNIMAP(r3, 0x4b66, &(0x7f0000000900)={0x3ea, &(0x7f00000008c0)=[{}, {}]}) utimensat(r3, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r4 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x10001, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) r5 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000840)={0x13c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/219, 0xdb, 0x2, 0x3b}, @flat=@weak_handle={0x77682a85, 0x1}, @flat=@weak_binder={0x77622a85, 0xa}}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x40}, @acquire_done={0x40106309, 0x2}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x110a, 0x2}}, &(0x7f0000000540)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000580)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @flat=@weak_binder={0x77622a85, 0x101, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000600)={0x0, 0x18, 0x30}}, 0x1040}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r5}, @increfs={0x40046304, 0x2}, @increfs], 0xa8, 0x0, &(0x7f0000000780)="29255419c4d22263914ba9695e293a6063e7496d484d72af58f4aca8e40ab8fd57be2e31083fd82c4146d261ecdaf7506ac1cb8f2ab7f99c565248b2616c73677d8cb4c438a20145e08dfdc2659035997e2c9482b9850157be09310aeb3cb49dfdf8243d3a501677456891380b1e3db59256c12a14b0e7597af885c83b6f796ac71571380fdf5a6bd3d32bd1026bf03e3cfc3f78b3158377737196e2e7817ef97d2dfdf3dd42cdfe"}) syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x802) 18:13:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2118.855361][T30021] binder: 30018:30021 unknown command 0 18:13:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x8955, &(0x7f0000000000)=0x1000000) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000001c0)=0x4) sendfile(r1, r0, 0x0, 0x80000000) 18:13:07 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast2, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) r2 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='\x00', 0xfffffffffffffffa) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-monitor\x00', 0x2000, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000002c0)=0x81) keyctl$get_persistent(0x16, r1, r2) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000300)=0x2, 0x4) 18:13:07 executing program 5: r0 = socket(0x5, 0x1, 0x7fffffff) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0xfffffffffffffffa, 0xfe00000000000000, 0x8, 0x81}, 0x10) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xa00, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1d, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2118.933405][T30021] binder: 30018:30021 ioctl c0306201 20000240 returned -22 18:13:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2119.145239][T30024] binder: 30018:30024 unknown command 0 [ 2119.198566][T30024] binder: 30018:30024 ioctl c0306201 20000240 returned -22 18:13:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) 18:13:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x21, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2119.293607][T30046] binder: 30045:30046 ioctl 40086602 20000000 returned -22 18:13:07 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) r1 = syz_open_dev$binder(0x0, 0x0, 0x7ff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x3e9, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) [ 2119.420651][T30046] binder: 30045:30046 ioctl 40086602 20000000 returned -22 18:13:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80101) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000026c0)={0x2, r0}) sendmsg$inet_sctp(r2, &(0x7f0000002700)={&(0x7f0000000040)=@in6={0xa, 0x4e20, 0x100000000, @mcast2}, 0x1c, &(0x7f0000002600)=[{&(0x7f0000000080)="8fd8b233782ce7810600fd08ca9fc17ac214fa85c30f8766c212c79ab5f4ace9fd51dbe8984639c485688679bbf57340b721f4ba331c107aafac69b684f03ff92ca43ea80abb1aa82c46e0725a04bec302723b063f7c72f5f84f893efcb7592ba5549610280e39afcff41c62fe99712d332a158082dcac568b7b376f8abc62cedf", 0x81}, {&(0x7f0000000280)="03a1f676547375e1f275a6b4ef384550657e9c97bfec9724e06f4462d8d2d7f095074e9d91ef168e3d91f6c5b4c9b0c8dc9af52ecbfdac9521f3b66a5d178e2e7a06c77962306f84ebf642b21f4f7ba5162d29586b1ed60e23993b657484acd76b418b20a9c90d3357330bc6f8908de298a988e8b4788ba1af058661bc4ed6fd505a975bcc4c2f2c6cfae34c384628ac716265e8e8c70b1d28eb46949c7309410eb8b5da1f6a9fcc04fff167ab6fa06c79663c8323279e65559ad0d1f02fd16fcf98f02e", 0xc4}, {&(0x7f0000000180)="070e100894d1f5023861889a2ebdd37ad1eb", 0x12}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="bf52e5c9f9cd9f6d9eeb8a15e7eddcf49b42360213ae36ec0b860ece41ac935e7e4c4542aab4c44278ab96dd01881d518985e05dacf4f486df003e0e6f258eab56c752609b2904293ffa90cc0eca86573929ee7862839a8d0515b04cb087f699d01bebbcd499a6e140f501cf4b579275382603a59517d7c04427f5b093c715c56e15320bb46a02ff8e57afbcd3c88aab", 0x90}, {&(0x7f0000001440)="60a00e713662d9b01dfe5475091aa919ffa328ba3b8349c0c9c5c690ceb2714887397e6efb3084009d43d235a8d85ecbe4065445abe5788899265ae0ef0165e69d1bb98d53fd419c5fc2c7b3429e4d3c6740a77c9ca4a2594c58ab0014a2a91a8fab4a98d323e8f8068fff16c9e8d4548de42ae9dd763dde80924062eccfd461006b5ebd64c11327d7b53af5a231969cd837d1", 0x93}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f00000001c0)="9541610612f79935c09a61372fa27d1b5fb9ef7a47411cc27e18bd9daba837511dcf9bd6a433c8ca169c196cb4198d7d075798b23df024a1da14b47887db520617d746bc0d723518c0f9", 0x4a}, {&(0x7f0000002500)="98a1ffb62c3954bf80bd3db91460117aadf4ce524f441e83a8fdf092d2d2523e27710c55c00de465026bbbcfca1ed6e72a14d6f69a32b237c6fa3a6be2ef666e492361d594ec6a698c1894162d4c3e51755bd95e131cc82239bb4a2a93e86c95f7eae2fc37d30b3def1dc873f1944ffb43c705b9880e7463d38616077590c4f85bbf29c1650d90cb56860013f5099ebe12db55485f0e667142cc21d587b5c1f21acfd06d275831425bb14b30a15b6be65a0032be22fa4aef93af56f69641c76076424420760f097282f306227aabc45cc5bde8b55648c5f10759a0051b76e4b7efc2ca7864027760", 0xe8}], 0x9, &(0x7f0000002740)=ANY=[@ANYBLOB="200000000000000084000000080200000000000000000400000000000000000118000000000000008400000006000000000000000000000060667514369599baa312295c5c9c529b3cd405625e578fd3ad19f10046653fcb80f9869fc347f1e5e45a9504328f3d727ae25e11c003d526d424b7a3b0a6b006"], 0x38, 0x40}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x2ed, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:13:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = socket(0x4, 0x804, 0x7) bind$bt_sco(r1, &(0x7f00000000c0)={0x1f, {0xa635, 0x3, 0x5, 0x6, 0x7, 0x22}}, 0x8) 18:13:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x22, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2119.702486][T30068] binder: 30062:30068 ioctl 4008af21 200026c0 returned -22 18:13:08 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x7, 0x9) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:08 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x7, 0x100) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x240000000) [ 2121.423176][T30099] IPVS: ftp: loaded support on port[0] = 21 [ 2121.546268][ T5053] device bridge_slave_1 left promiscuous mode [ 2121.554415][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.619250][ T5053] device bridge_slave_0 left promiscuous mode [ 2121.625380][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.351049][ T5053] device hsr_slave_1 left promiscuous mode [ 2123.394498][ T5053] device hsr_slave_0 left promiscuous mode [ 2123.454759][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2123.466389][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2123.477532][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2123.542433][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2123.625335][ T5053] bond0 (unregistering): Released all slaves [ 2123.768572][T30099] chnl_net:caif_netlink_parms(): no params data found [ 2123.799370][T30099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.806587][T30099] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.815121][T30099] device bridge_slave_0 entered promiscuous mode [ 2123.822965][T30099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.831165][T30099] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.839406][T30099] device bridge_slave_1 entered promiscuous mode [ 2123.859557][T30099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2123.870414][T30099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2123.894569][T30099] team0: Port device team_slave_0 added [ 2123.903653][T30099] team0: Port device team_slave_1 added [ 2123.981177][T30099] device hsr_slave_0 entered promiscuous mode [ 2124.018578][T30099] device hsr_slave_1 entered promiscuous mode [ 2124.148423][T30099] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.155457][T30099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2124.162831][T30099] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.169902][T30099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2124.220528][T30099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2124.235602][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2124.244650][T14497] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.253174][T14497] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.262984][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2124.277729][T30099] 8021q: adding VLAN 0 to HW filter on device team0 [ 2124.292108][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2124.301072][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.308134][T14497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2124.332762][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2124.342439][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.349552][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2124.358113][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2124.381181][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2124.390205][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2124.399462][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2124.408061][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2124.420067][T30099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2124.449519][T30099] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1020, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:13 executing program 4: openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2e4801, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x23, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000040)='comm\x00') ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f00000000c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'y\a\x00\x00\x00\x00\x00\x00\x00}\x00\x10\x00', 0xc205}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x3, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:13:13 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x200000, 0x0) connect$vsock_dgram(r1, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @reserved}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x400001, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000240)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0xd00, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:13 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) nanosleep(&(0x7f00000000c0)={r1, r2+10000000}, &(0x7f0000000100)) nanosleep(&(0x7f0000000180)={0x0, 0x1c9c380}, 0x0) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$RTC_VL_READ(r3, 0x80047013, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x24, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:13 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x10, &(0x7f0000000180)={&(0x7f00000000c0)=""/133, 0x85, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r1, 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x1, 0x0, 0x8000000000000000}}) 18:13:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x25, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2125.180233][T30138] binder: 30136:30138 unknown command 0 [ 2125.218518][T30138] binder: 30136:30138 ioctl c0306201 20000040 returned -22 18:13:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x400000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:14 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663189f062988ea"], 0x0, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) 18:13:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x28, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) socketpair(0x1, 0x80006, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$isdn_base(r1, &(0x7f0000000100)={0x22, 0x8, 0x626, 0x4, 0x20}, 0x6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:14 executing program 2: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) r2 = syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0xf47, 0x542) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)={0x1e, 0x4, 0x7fffffff, 0x80, 0x81, r0, 0x3, [], r1, r2, 0x1, 0x5}, 0x3c) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') sync_file_range(r4, 0x10001, 0xc24, 0x2) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000400)={0x0, 0x7530}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x8955, &(0x7f0000000000)=0x2) write$rfkill(r4, &(0x7f0000000040)={0xac, 0x8, 0x2}, 0x8) sendfile(r4, r3, 0x0, 0x80000000) [ 2125.733955][T30159] binder: 30156:30159 unknown command -1625791738 [ 2125.748496][T30159] binder: 30156:30159 ioctl c0306201 20000240 returned -22 [ 2125.787742][T30159] binder: 30156:30159 unknown command -1625791738 18:13:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) read$eventfd(r1, &(0x7f0000000100), 0x8) r2 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)='/dev/snd/timer\x00', 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)='/dev/snd/timer\x00', 0xfffffffffffffffc) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x400000, 0x0) accept4$netrom(r4, &(0x7f0000000340)={{0x3, @rose}, [@null, @netrom, @bcast, @null, @default, @default, @default, @default]}, &(0x7f00000003c0)=0x48, 0x80000) r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x512, 0x101000) ioctl$TCSBRKP(r5, 0x5425, 0x2) keyctl$search(0xa, r2, &(0x7f0000000180)='blacklist\x00', &(0x7f00000001c0)={'syz', 0x3}, r3) [ 2125.836427][T30159] binder: 30156:30159 ioctl c0306201 20000240 returned -22 18:13:14 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000500)='/dev/null\x00', 0x2000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = dup2(r2, r1) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000400)=@assoc_id=0x0, &(0x7f0000000440)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000480)={r4, 0x7}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x7288d7ab, 0xffff, 0x10001, 0xcd}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000280)={0x0, 0x8, 0xa, [0x100000000, 0x2, 0xc7e9, 0x2, 0x9, 0x3, 0x2, 0x3, 0x6, 0x2]}, &(0x7f00000002c0)=0x1c) sendmmsg$inet_sctp(r3, &(0x7f00000003c0)=[{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000001}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)="a220476850e1bc55335718d360b0d40494ee706ad8aaaa952722a670c7858519d4e2472219abc48fe8e8cbf998d295df84955549c09e6c84f61c9620ff78a03b51a66732ac2ce03d8d36190f1898edb5a96d7bcb0d8c8ddeea3cc6b73761858579b35817964112c89fac6bce54340a340eb6d90e58c17385e5de5decf5e0d412c433e9345b3c1ac3b692a0f69da68877d0dbd66514745f305be629169d8f9771d5db0cdaf84da47e63d7c57e2a46084bac60a5fba4d0440c58e9b857ac9786c8cf51fb157d2b13eb595a63315aa8b468", 0xd0}], 0x1, &(0x7f0000000300)=[@authinfo={0x18, 0x84, 0x6, {0x3f}}, @init={0x18, 0x84, 0x0, {0x883d, 0x6, 0x7, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0x17}}, @sndinfo={0x20, 0x84, 0x2, {0x80000000, 0xbde5c98e635ff74b, 0x100, 0xb3, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x1000, 0x4, 0x1, 0x9, r6}}], 0xa8, 0x20000085}], 0x1, 0x1) 18:13:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x29, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2010, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:14 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x802, 0x0) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0xc076}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x307) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)=0x1) socket$inet_udplite(0x2, 0x2, 0x88) accept4$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80000) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r3 = socket$inet(0x2, 0x4000000000000001, 0x2) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:13:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x2, 0x4001) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100)=0x6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:14 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x78b480, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @local}]}) 18:13:14 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x4, 0x0) getsockname$netrom(r1, &(0x7f00000000c0)={{0x3, @netrom}, [@bcast, @remote, @default, @rose, @null, @default, @netrom, @bcast]}, &(0x7f0000000180)=0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2b, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2c, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:15 executing program 5: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x6, 0x40140) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0x10000, 0x3, 0x1}}) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:15 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x28000, 0x0) getsockname$netlink(r6, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 18:13:15 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2000, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000040)={0x2a, "3eb00985a6e365f96e9d8992c3ff0b1f7e98c1083dd617fcfd2714f6f1d156f04e9d4f92ad008fd5a560d9fdc6b5fe3ec66b6956b0641675cdef1b3adb0d7a897878b081fa7b051107142db2660e507ccd0c674dfd62c5ed43857e29987238eb2fc7c9f15bd8ee7893f12db3fa45d4e2212afd51ed35569a493cc062c0575b05"}) ioctl$BINDER_WRITE_READ(0xffffffffffffff9c, 0xc0306201, &(0x7f0000000480)={0xc0, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x86741a7163db65f2}, @fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @acquire={0x40046305, 0x3}, @decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x3}], 0x8a, 0x0, &(0x7f00000003c0)="d2e422bc3493568e0d796fb64e3ec726c20bd5bbb52d3382f9b9448357d9663679080473bf209b3a020c8c43ccf69f703de44c4ee6e6c47f2a43e3575c8cc99c091a6c8329c5482a23658043d241e8df4d1dd10506e6c753fd2fef72932bf02302e70baf19a94c6a84cc211ebfacb51245651c48c600936f8300e097eaf8e327f8a51230ab2ee22368f9"}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2128.497777][T30243] IPVS: ftp: loaded support on port[0] = 21 [ 2128.708438][T30243] chnl_net:caif_netlink_parms(): no params data found [ 2128.738933][T30243] bridge0: port 1(bridge_slave_0) entered blocking state [ 2128.746101][T30243] bridge0: port 1(bridge_slave_0) entered disabled state [ 2128.753876][T30243] device bridge_slave_0 entered promiscuous mode [ 2128.762174][T30243] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.769405][T30243] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.777193][T30243] device bridge_slave_1 entered promiscuous mode [ 2128.784409][ T5053] device bridge_slave_1 left promiscuous mode [ 2128.791387][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.838863][ T5053] device bridge_slave_0 left promiscuous mode [ 2128.845114][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.661131][ T5053] device hsr_slave_1 left promiscuous mode [ 2130.731351][ T5053] device hsr_slave_0 left promiscuous mode [ 2130.784047][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2130.795418][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2130.808572][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2130.864745][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2130.954471][ T5053] bond0 (unregistering): Released all slaves [ 2131.084147][T30243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2131.095337][T30243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2131.116322][T30243] team0: Port device team_slave_0 added [ 2131.123240][T30243] team0: Port device team_slave_1 added [ 2131.201472][T30243] device hsr_slave_0 entered promiscuous mode [ 2131.258594][T30243] device hsr_slave_1 entered promiscuous mode [ 2131.341989][T30243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2131.355518][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2131.366733][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2131.375001][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2131.431038][T30243] 8021q: adding VLAN 0 to HW filter on device team0 [ 2131.450546][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2131.459782][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2131.469005][T14497] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.476117][T14497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2131.484778][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2131.494311][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2131.518825][T14497] bridge0: port 2(bridge_slave_1) entered blocking state [ 2131.525892][T14497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2131.551550][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2131.559893][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2131.575464][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2131.587304][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2131.602439][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2131.617581][T30243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2131.636729][T30243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2131.646519][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2131.662408][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2131.693589][T30243] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3f00, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:20 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000000)=0x2) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)="95bc94048fa792ff1bc2d0ec29659ad4cce5b06506f4da0b8355a51dc32ae9edf9272ec33d09104f133e6166dfdcd1f95b925b3a13dae2c8b8655c182d2c15569bd06d", 0x43) sendfile(r1, r0, 0x0, 0x7ffffffd) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 18:13:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2d, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:20 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x802) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r1, 0x0, &(0x7f0000000080)={&(0x7f0000000040)="e130aff43fa6d24b12babf45dbcecfc49a48f72142ae7adff47ea40c49c7", 0x1e}) 18:13:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) sync_file_range(r0, 0x0, 0x5, 0x6) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x4000, 0x0) getsockopt$inet_buf(r1, 0x0, 0x27, &(0x7f0000000100)=""/44, &(0x7f0000000140)=0x2c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:20 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@remote, @local, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2, 0x4, 0x8, 0x500, 0xe90, 0x40, r1}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x202042, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000000100)=0x4, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="06636be928000000"], 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000140)=0x4) 18:13:20 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0xf, 0x80a, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x100000000, {{0x2, 0x4e23, @remote}}}, 0x88) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) [ 2132.033304][T30262] binder: 30258:30262 unknown command -378838266 [ 2132.065089][T30262] binder: 30258:30262 ioctl c0306201 20000240 returned -22 18:13:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2e, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80102, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000100)) 18:13:20 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x2f, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) sendto$rxrpc(r1, &(0x7f0000000140)="cb40a950fd7cc7db9a80a51f9fa7454b8407a478aecfd04dab7bdcc41a7bc61c513c5783fc459891d2e585f5b262cb4e1efae07c7afcb64f8ec41c93e6451c678cfd6550a915b71974fa0975ac01bb9ebc16b2fabe01d85348bf7318f73151ebc82c9e35c5e7f12a91c54c1c425ac6257d4e69cd74935dcc844adb5ff998c044e0a06803f50d56d439fd71c984be4ba571ef8ea2bd74e0261571ae331be3cbed19394d493281e1c7e910c7e7943bacca2cf0f56e", 0xb4, 0x800, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x24) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x8000, 0x0) 18:13:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x4000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @dev={[], 0x1c}}, 0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 'veth1_to_hsr\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 18:13:21 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) accept4$rose(r1, &(0x7f0000000040)=@full={0xb, @remote, @null, 0x0, [@remote, @rose, @remote, @default, @bcast, @null]}, &(0x7f0000000080)=0x40, 0x80800) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:21 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f000000a5c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/97, 0x61}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x4, &(0x7f0000000200)=""/59, 0x3b}, 0x10001}, {{&(0x7f00000023c0)=@can, 0x80, &(0x7f0000002900)=[{&(0x7f0000002440)=""/31, 0x1f}, {&(0x7f0000002480)=""/121, 0x79}, {&(0x7f0000002500)=""/187, 0xbb}, {&(0x7f00000025c0)=""/40, 0x28}, {&(0x7f0000002600)=""/89, 0x59}, {&(0x7f0000002680)=""/234, 0xea}, {&(0x7f0000002780)=""/245, 0xf5}, {&(0x7f0000002880)=""/103, 0x67}], 0x8, &(0x7f0000002980)=""/242, 0xf2}, 0x3}, {{&(0x7f0000002a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/210, 0xd2}, {&(0x7f0000003c00)=""/130, 0x82}], 0x3, &(0x7f0000003d00)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000004d00)=@nfc, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004d80)=""/2, 0x2}, {&(0x7f0000004dc0)=""/18, 0x12}], 0x2, &(0x7f0000004e40)=""/174, 0xae}, 0x6}, {{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000004f00)=""/151, 0x97}, {&(0x7f0000004fc0)=""/222, 0xde}], 0x2, &(0x7f0000005100)=""/93, 0x5d}, 0x8}, {{&(0x7f0000005180)=@tipc, 0x80, &(0x7f0000005680)=[{&(0x7f0000005200)=""/208, 0xd0}, {&(0x7f0000005300)=""/210, 0xd2}, {&(0x7f0000005400)=""/93, 0x5d}, {&(0x7f0000005480)=""/31, 0x1f}, {&(0x7f00000054c0)=""/201, 0xc9}, {&(0x7f00000055c0)=""/189, 0xbd}], 0x6, &(0x7f0000005700)=""/4096, 0x1000}, 0x8001}, {{&(0x7f0000006700)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000067c0)=[{&(0x7f0000006780)=""/52, 0x34}], 0x1, &(0x7f0000006800)=""/122, 0x7a}, 0x7ff}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000006880)=""/101, 0x65}, {&(0x7f0000006900)=""/77, 0x4d}, {&(0x7f0000006980)=""/160, 0xa0}, {&(0x7f0000006a40)=""/147, 0x93}, {&(0x7f0000006b00)=""/239, 0xef}, {&(0x7f0000006c00)=""/4096, 0x1000}, {&(0x7f0000007c00)=""/3, 0x3}, {&(0x7f0000007c40)=""/181, 0xb5}, {&(0x7f0000007d00)=""/224, 0xe0}, {&(0x7f0000007e00)=""/29, 0x1d}], 0xa, &(0x7f0000007f00)=""/253, 0xfd}, 0x4}, {{&(0x7f0000008000)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f000000a4c0)=[{&(0x7f0000008080)=""/196, 0xc4}, {&(0x7f0000008180)=""/209, 0xd1}, {&(0x7f0000008280)=""/197, 0xc5}, {&(0x7f0000008380)=""/4096, 0x1000}, {&(0x7f0000009380)=""/4096, 0x1000}, {&(0x7f000000a380)=""/53, 0x35}, {&(0x7f000000a3c0)=""/219, 0xdb}], 0x7, &(0x7f000000a540)=""/111, 0x6f}, 0x400}], 0x9, 0x2, &(0x7f000000a800)={0x0, 0x1c9c380}) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f000000a840)={{0xa, 0x4e22, 0x2, @empty, 0x1}, {0xa, 0x4e20, 0x7f, @ipv4={[], [], @rand_addr=0x8000}, 0x6}, 0x80, [0xfffffffffffffff4, 0x8000, 0x7, 0x6, 0x100000001, 0x3, 0xb4d000, 0x4]}, 0x5c) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x10000, 0x0) ioctl$KDENABIO(r1, 0x4b36) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200840000000000"], 0x0, 0x0, 0x0}) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r3, 0x6, 0x3}, 0x14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') statx(r1, &(0x7f0000000300)='./file0\x00', 0x7000, 0x24, &(0x7f0000000340)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}, 0xffffffffffff566c, 0x2, 0x100000000, 0xffffffffffff8000, 0xdb2}, &(0x7f0000000040)=0x98) syz_open_dev$radio(&(0x7f0000000440)='/dev/radio#\x00', 0x2, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000280)={r5, 0x101, 0x0, 0xc073, 0x0, 0x200}, &(0x7f00000002c0)=0x14) 18:13:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x31, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xedc0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) [ 2132.994347][T30311] binder: 30307:30311 unknown command 8650754 [ 2133.078757][T30311] binder: 30307:30311 ioctl c0306201 20000040 returned -22 18:13:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x32, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:21 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x7, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0xfffffe96, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='security.apparmor\x00') r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0xf0, 0x7ff, 0x8001, 0x8, 0x7, 0x3236}) 18:13:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0xfffffffffffffffd}}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x10400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1210}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, r2, 0x90ce352110661252, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffffc}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0xe8bb, 0x1000, 0x8, 0x8, 0x6, 0x9}) [ 2133.155910][T30323] binder: 30307:30323 unknown command 8650754 [ 2133.226577][T30323] binder: 30307:30323 ioctl c0306201 20000040 returned -22 [ 2133.288333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2133.294151][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:13:21 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) finit_module(r0, &(0x7f0000000100)='cgroup(,\x0eposix_acl_access{^:\x00', 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046304400000000098d684b12e6ba78384ef3859323dc2d1641caea5b2d991692b2318e6b731ceb8baf6ba6789c708f0a70765c89050fc15bdf65092957b291e91ee736734ad8d58eced057ae52f48a6e224d547b5d37efddf8df90bd93cc1730617000ce19bba696d6b708aa4bc33baeef2ce6b2d118b02662332"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x3ff, 0x240000) accept$alg(r1, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7fe0fb57, 0x8000) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:21 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xfffffffffffffff5, 0x8}, 0x10) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x8000, 0x5, 0x6ab, 0xaa}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:22 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x3, 0x2) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000001c0)=0x4) 18:13:22 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x34, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:22 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0xe) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x80002) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2135.405748][T30378] IPVS: ftp: loaded support on port[0] = 21 [ 2135.602838][T30378] chnl_net:caif_netlink_parms(): no params data found [ 2135.697589][T30378] bridge0: port 1(bridge_slave_0) entered blocking state [ 2135.704806][T30378] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.712952][T30378] device bridge_slave_0 entered promiscuous mode [ 2135.720664][T30378] bridge0: port 2(bridge_slave_1) entered blocking state [ 2135.727736][T30378] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.735417][T30378] device bridge_slave_1 entered promiscuous mode [ 2135.742676][ T5053] device bridge_slave_1 left promiscuous mode [ 2135.750495][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2135.818889][ T5053] device bridge_slave_0 left promiscuous mode [ 2135.825069][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2137.621039][ T5053] device hsr_slave_1 left promiscuous mode [ 2137.663152][ T5053] device hsr_slave_0 left promiscuous mode [ 2137.722788][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2137.735164][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2137.746056][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2137.794953][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2137.886976][ T5053] bond0 (unregistering): Released all slaves [ 2138.003998][T30378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.015130][T30378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2138.036080][T30378] team0: Port device team_slave_0 added [ 2138.043385][T30378] team0: Port device team_slave_1 added [ 2138.102208][T30378] device hsr_slave_0 entered promiscuous mode [ 2138.168671][T30378] device hsr_slave_1 entered promiscuous mode [ 2138.268008][T30378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2138.285973][T30378] 8021q: adding VLAN 0 to HW filter on device team0 [ 2138.294976][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2138.304683][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2138.313163][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2138.394251][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2138.418728][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2138.427125][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2138.434270][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2138.442053][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2138.451332][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2138.459883][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2138.466959][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2138.474929][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2138.484137][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2138.493450][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2138.501554][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2138.533649][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2138.544578][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2138.564151][T30378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2138.583070][T30378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2138.594813][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2138.633898][T30378] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xff00, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0xffffffffffffffff}, 0x0, 0x5d8f}) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xd95, 0x0) semget(0x3, 0x0, 0x188) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0xc) 18:13:27 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40000, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) 18:13:27 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x220000, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000180)) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000040), 0x4) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x3, 0x9}) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x35, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:27 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x408000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:13:27 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)=""/238, &(0x7f0000000180)=0xee) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000280)="3ca86574e42236aebe53a57ecb5d9fe9a249f11d02459f6088e9fddd673a370224b7dc0e72244b6a556c6a96a5dbbb93613fec27b5baac1ee8f63c0483c9a9e953798cd21bcde582e3f7fe1dee79b8c2c7fca924246572aec77d2c2a093e0df130cace463e9eada6045583e11e0160639fdfa239a4343bd1efb8058616e7ae8400601a23205945c9eb2e122dc10ad8c3e4cec9", 0x93) [ 2139.009511][T30401] binder: 30394:30401 ioctl 80082407 20000080 returned -22 18:13:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2139.093869][T30409] binder: 30394:30409 ioctl 80082407 20000080 returned -22 18:13:27 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0xfffffffffffffffd}, 0x0, 0x7ff, 0x3}) 18:13:27 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f00000001c0)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,v&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\xad\"\xe8U0%\xa2\xe8\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}0xffffffffffffffff}, 0x800) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e21, 0x9, @remote, 0x100000000}, 0x1c) 18:13:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x42, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2140.620071][T30487] binder: 30484:30487 ioctl c0046686 20000080 returned -22 18:13:29 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000100)={@remote, @loopback, 0x1, 0x8, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @local, @loopback, @multicast2, @local, @local, @broadcast]}, 0x30) [ 2140.740379][T30495] binder: 30484:30495 ioctl c0046686 20000080 returned -22 18:13:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x43, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:29 executing program 0: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:29 executing program 4: syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000040)) 18:13:29 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x2, 0x2, 0xd33, 0xffffffff, 0xffffffff80000001}) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) [ 2142.662874][T30531] IPVS: ftp: loaded support on port[0] = 21 [ 2142.811399][T30531] chnl_net:caif_netlink_parms(): no params data found [ 2142.842499][T30531] bridge0: port 1(bridge_slave_0) entered blocking state [ 2142.849999][T30531] bridge0: port 1(bridge_slave_0) entered disabled state [ 2142.857930][T30531] device bridge_slave_0 entered promiscuous mode [ 2142.928144][T30531] bridge0: port 2(bridge_slave_1) entered blocking state [ 2142.935626][T30531] bridge0: port 2(bridge_slave_1) entered disabled state [ 2142.943951][T30531] device bridge_slave_1 entered promiscuous mode [ 2142.956982][ T5053] device bridge_slave_1 left promiscuous mode [ 2142.963937][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.009409][ T5053] device bridge_slave_0 left promiscuous mode [ 2143.015608][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2144.870169][ T5053] device hsr_slave_1 left promiscuous mode [ 2144.912063][ T5053] device hsr_slave_0 left promiscuous mode [ 2144.972820][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2144.986239][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2144.997620][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2145.036008][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2145.124936][ T5053] bond0 (unregistering): Released all slaves [ 2145.216753][T30531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2145.227606][T30531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2145.248521][T30531] team0: Port device team_slave_0 added [ 2145.255154][T30531] team0: Port device team_slave_1 added [ 2145.321413][T30531] device hsr_slave_0 entered promiscuous mode [ 2145.398677][T30531] device hsr_slave_1 entered promiscuous mode [ 2145.481514][T30531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2145.496107][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2145.508454][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2145.516379][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2145.526341][T30531] 8021q: adding VLAN 0 to HW filter on device team0 [ 2145.585540][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2145.596162][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2145.611696][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2145.618843][T14495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2145.643899][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2145.652375][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2145.662008][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2145.671164][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2145.678275][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2145.687028][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2145.696566][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2145.720849][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2145.735734][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2145.760248][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2145.774889][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2145.783571][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2145.800453][T30531] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2145.845841][T30531] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:34 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x40, 0x0) write$P9_RLINK(r0, &(0x7f0000000100)={0x7, 0x47, 0x2}, 0x7) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:34 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x84800) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f00000000c0)={0xc22f, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:34 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x7, 0x14, 0x7}) 18:13:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) r3 = geteuid() ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0x200, 0x7, 0x5, 0x0, 0x2}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet(0x2, 0x80000, 0x3) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:13:34 executing program 4: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:34 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair(0xd, 0x7, 0x7f, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000200)=0x524d, &(0x7f0000000280)=0x4) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x8, 0x8, 0x4, 0x6, 0x0, 0x6, 0x8080, 0x1, 0x800, 0x1f, 0x80000000, 0x439289b6, 0x200, 0x9, 0x8, 0x0, 0x7, 0xfffffffffffffff9, 0xe1, 0x8, 0x0, 0x10001, 0xffff, 0x9, 0x87fa, 0x3, 0x6c74beac, 0x1, 0x1, 0x80000001, 0x6, 0xc8c0, 0x1b, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x1, 0x6, @perf_config_ext={0x0, 0x6}, 0x10, 0xf, 0x5, 0xf, 0x0, 0x9, 0xffffffff}, 0xffffffffffffffff, 0x0, r2, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x7, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:34 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:35 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000000)={0xfffffffffffffdfd, 0x0, 0x0, 0x601, 0x0, 0x0}) 18:13:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000080)=0xe8) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @bcast, r2}) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)='/dev/binder#\x00', 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000380)={r3, 0xc2, 0x27}, &(0x7f00000003c0)={'enc=', 'oaep', ' hash=', {'sha1-ni\x00'}}, &(0x7f0000000440)="63eb48b11c7f7e30930c4ff7b32ecf837c0637bcb13fe3407e91b04722b86549e0f7fd5496f0dc03bdbc9eb2061ce88b63acdffa44a17ed0f285c47c205eb6caf32f6352edf28b19872511750c825d1ef1f6dae5e5cfcacb322747fe7900da129afd4f222fc26ef4b3dcc76fb27e83b08b55b6a068e14b469dea0fa427c68cb966bf8e31d0d5309d5157d323c27a51320546a252669dabecbdfa826f4cfdbbd75ba6bd5c447d2dd4b89302c9b1a76c3ba996af9618914b6a229a1ccff7d13ada7769", &(0x7f0000000540)=""/39) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0623244000002200"], 0x0, 0x0, 0x0}) 18:13:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:35 executing program 5: syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0) bind$netrom(r0, &(0x7f0000000040)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r1, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x94, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb4e}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8c8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) creat(&(0x7f0000000300)='./file0\x00', 0x108) 18:13:35 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000000000002) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 2146.858064][T30585] binder: 30584:30585 ioctl 89e1 200000c0 returned -22 [ 2146.898781][T30585] binder: 30584:30585 unknown command 1076110086 18:13:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2146.942090][T30585] binder: 30584:30585 ioctl c0306201 20000240 returned -22 [ 2146.995872][T30593] binder: 30584:30593 ioctl 89e1 200000c0 returned -22 [ 2147.089166][T30602] binder: BINDER_SET_CONTEXT_MGR already set [ 2147.143412][T30602] binder: 30594:30602 ioctl 4018620d 20000240 returned -16 18:13:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x4000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:35 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') set_mempolicy(0x3, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0xa13, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r5, r7, 0x0, 0x80002d000000) sendfile(r1, r0, 0x0, 0x80000000) 18:13:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000001840)='/dev/dmmidi#\x00', 0x800, 0x4000) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x6, 0x9cfc}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x61bc677fe321e403, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000017c0)={0xf0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="096310400100000000000000000000000000000001634040020000000000000000000000000000000000000001000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f0000001280)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r0, @ANYBLOB="000000000000000000000000852a747000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], @ANYBLOB="040000000000000000000000000000001700000000000000852a747001000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="001000000000000000000000000000001a00000000000000"], @ANYPTR=&(0x7f0000001800)=ANY=[@ANYBLOB="00000000000000801800000020fd000000004000000000000000"], @ANYBLOB="12634840020000000000000000000000000000000000000011000000000000000000000068000000000000001800000000000000", @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000001300)=ANY=[@ANYBLOB='\x00'/166], @ANYBLOB="a600000000000000010000000000000034000000000000008561646600000000050000000000000002000000000000000b000000000000008561646600000000000000000000000000000000000000003a00000000000000"], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="4000000000000000056304400100000000634040000000000000000000000000000000000000000011000000000000000000000058000000000000001800000000000000", @ANYPTR=&(0x7f0000001500)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a747005000000", @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB='\x00'/178], @ANYBLOB="b20000000000000002000000000000001100000000000000852a68730a0000000200"/48], @ANYPTR=&(0x7f0000001580)=ANY=[@ANYBLOB="000000000000000018000000000000004000000000000000"]], 0xf3, 0x0, &(0x7f00000016c0)="b1a74d92c3fe4c8fbdcffd992f30c4b82094b10b2e39f8a752286f830f3dcc54c7faa4e7e4b195a26493896e07aa907decaad96c88c35a32d7a98426de84f51e4a3c46100d965b93430c2b2be6534fc72c562c0d8f7e4493f036585004326dfd46b3d90cb440473b342e563c2e413d2b087d2ff41139962d6666aa5d0aa1c83294cc993793ed88ed3387af5ba4f306f880e7b31172b312bd21c262101d9e4967c8969737e139f87712d545ee922bf504e48d9dd1a8d7948d9105f14ec3e5c5a7c470e55708dfef9a0a9a47707f92c05c491b78d19ee1766dafa72be20c4c9fac609ad834e5e618f3e90059f55774811c4fe93f"}) fcntl$getflags(r2, 0x0) ioctl$TIOCMSET(r3, 0x5418, &(0x7f00000000c0)=0xdffffffffffffe14) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x40040, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYBLOB="3a0d85ae94e0ee42d48ec865b54da0b5bd4e3def84e4194251abdc011f374f8c5374a0f2f259dbdba8cfb33f1fbab16bb6a27fb4eb52f235397e6e67a6dfb9e7b91eafcc004379934452217161f5a16daa929e499b2ae428a60b1ea67634b8d4bc5c0ac0bd50aa8da4f853f3250e3b11e30cc773174b30e8956488cb65b55aa7bdcc96fc6774f6bf84a049b8b62d5196ccf771f33d1b4ef9be542943e5d95e6d041487cc797e8cf78ee07ea46968baff4f7dff61573ecf36ec4577279bb6a269ef1e806b89dd22"], 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x13, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:35 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x10b, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x5000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:36 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x10000}) 18:13:36 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x280900, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) syz_open_dev$video(&(0x7f0000000180)='/dev/video#\x00', 0xff, 0x88240) 18:13:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x14, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:36 executing program 4: syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, {0x0, 0x47b6f479, 0xa4fe0000, 0x2fb5}}) 18:13:36 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xa0, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x84}, @IPVS_SVC_ATTR_AF={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x11}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000091}, 0x10) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000240)={0x3, 0x0, 0x1, "3c283040b2f2f515d5c47f3f0b40da10cbaf44252640f3cfb3020d97d640e8ff", 0x32315258}) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000480)={r5, 0x3}) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000400)={0xa, 0x4, 0xfa00, {r4}}, 0xc) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="066304400000fa00"], 0x0, 0x0, 0x0}) 18:13:36 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f00000001c0)={0x9, 0x108, 0xfa00, {r2, 0x47, "edb392", "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"}}, 0x110) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:36 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1000000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) recvmsg(r4, &(0x7f0000000040)={&(0x7f00000001c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f0000000340)=""/196, 0xfffffffffffffff5}, {&(0x7f0000000440)=""/191, 0x459}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/113, 0x48}, {&(0x7f0000000600)=""/177, 0xb1}], 0x6, &(0x7f0000000800)=""/178, 0xb2}, 0x10000) 18:13:36 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x22) 18:13:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x46, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:36 executing program 0: syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0x0, 0x7fe) socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x18000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0663040010000000"], 0x0, 0x0, 0x0}) syz_mount_image$nfs(&(0x7f00000000c0)='nfs\x00', &(0x7f0000000100)='./file0\x00', 0x7, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000280)="88df1c068afde2adb2a608e628ef145eaccda223816fc826bccf951a9fb2474e1428237b7ce2fba5f424032f78f2941cbda5951acc922475047b0d1904cfd1497ded266b36c843600d0d7b3fda471efc7c2d6d466c7bff75949cb15d01dc349cee8416e5457e0ab848f0aec2b7", 0x6d, 0xfffffffffffffff7}, {&(0x7f0000000300)="addd3738a2b3c0f70179960532eeff128eff6cb478d3684084495d04dec1b33351108d4e0c9b9b58b07762e6009d426e0946f6f3341a309c1bf30a9302f3cd84580ab969f3f6726cae7240c6be2e5d3a58120902cd15c3f72b8e17124ffad974ef002a6dd90db6aef8c7fc55782cd9e5cab75d29cb158ffe4b84ded8135f9ca28d5a2fcd269b4b39335fc8832df09aa4f7c3e0a229ff7d19a7bdf65e46a26d1ea82e874fc9cd49884a34d0f53dd81e10d62faed5a811828afb32c00020", 0xbd, 0x4}, {&(0x7f0000000180)="d0166f5effe9e39f94c715894ceb8f21b15b8ee260e5fd52c75661ebd35d4b1e8d6ed5bc0112b1a6289c06c8a4a5a315aa", 0x31, 0x8}], 0x1, &(0x7f0000000200)='cgroup&\x00') 18:13:36 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x3ffffe) fcntl$setsig(r0, 0xa, 0x41) getpeername$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x482400, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000180)={0x0, 0x8}) [ 2148.606983][T30664] binder: 30655:30664 ioctl 40045568 22 returned -22 [ 2149.969259][T30674] IPVS: ftp: loaded support on port[0] = 21 [ 2149.991202][ T5053] device bridge_slave_1 left promiscuous mode [ 2149.997369][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2150.059042][ T5053] device bridge_slave_0 left promiscuous mode [ 2150.065315][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.710904][ T5053] device hsr_slave_1 left promiscuous mode [ 2151.753234][ T5053] device hsr_slave_0 left promiscuous mode [ 2151.811997][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2151.824441][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2151.835287][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2151.873875][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2151.965285][ T5053] bond0 (unregistering): Released all slaves [ 2152.115941][T30674] chnl_net:caif_netlink_parms(): no params data found [ 2152.145144][T30674] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.152310][T30674] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.160243][T30674] device bridge_slave_0 entered promiscuous mode [ 2152.167703][T30674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.174998][T30674] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.187727][T30674] device bridge_slave_1 entered promiscuous mode [ 2152.208656][T30674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2152.224644][T30674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2152.244877][T30674] team0: Port device team_slave_0 added [ 2152.253071][T30674] team0: Port device team_slave_1 added [ 2152.351188][T30674] device hsr_slave_0 entered promiscuous mode [ 2152.388551][T30674] device hsr_slave_1 entered promiscuous mode [ 2152.437825][T30674] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.444961][T30674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2152.452394][T30674] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.459492][T30674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2152.545174][T30674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2152.567470][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2152.584327][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.593755][T14653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.615786][T30674] 8021q: adding VLAN 0 to HW filter on device team0 [ 2152.636359][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2152.654522][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.661641][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2152.690776][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2152.699574][T14655] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.706642][T14655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2152.725013][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2152.733966][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2152.750201][T30674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2152.761301][T30674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2152.774306][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2152.783313][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2152.792311][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2152.809723][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2152.822521][T30674] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:41 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x6000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0xc0, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:41 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xfffffffffffffffe, 0x10000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, r1, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000001}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x37}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x2}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0xc000}, 0x4) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x101, 0x57b7143f489f957a) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000200)={0x5, @win={{0x7, 0x1, 0x8, 0x3}, 0x2, 0x8, &(0x7f0000000100)={{0x3f, 0x0, 0x3014be07, 0x41}, &(0x7f00000000c0)={{0x0, 0xe8, 0x6, 0x2}, &(0x7f0000000080)={{0x1, 0x8001, 0x2, 0xff}}}}, 0xfff, &(0x7f0000000180)="fa3590894ab6ae711a020254689900948037c83050e00e512a270be8c1da868b65318b272a494576fbdf8db615bdcf730038fbd14acec400964d15252908b26f1202a9119b6325052ef14637dfa7285d71dc276bf0cc07fd96b0cdec50a8", 0x800}}) syz_open_dev$binder(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) 18:13:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x480000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r2, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x12}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xd}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffff001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x294f}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="21cbeb5b4afc9d654cb335d5aa2c1da5"}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x796}]}, 0xc8}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:41 executing program 2: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) flistxattr(r0, &(0x7f00000001c0)=""/166, 0xa6) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') write$FUSE_LSEEK(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x4, {0x6}}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r5 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x8955, &(0x7f0000000000)=0x2) sendfile(r2, r1, 0x0, 0x80000000) 18:13:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000004c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x104, 0x0, &(0x7f0000000780)=[@register_looper, @exit_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x2, 0x31}, @fda={0x66646185, 0x0, 0x0, 0x3a}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}, 0x1400}, @transaction={0x40406300, {0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x7, 0x1, 0x1b}, @flat=@weak_binder={0x77622a85, 0x100, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x2a}}, &(0x7f0000000640)={0x0, 0x20, 0x38}}}, @acquire_done={0x40106309, 0x2}, @acquire_done={0x40106309, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x4, 0x0, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/222, 0xde, 0x0, 0x40}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$cec(&(0x7f00000001c0)='/dev/cec#\x00', 0x2, 0x2) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000200)=0x1, 0x4) 18:13:41 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x81) fcntl$setlease(r1, 0x400, 0x3) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x480081, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000001c0)=0x3c4, 0x4) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x101000, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000280)={0x2, @win={{0x9, 0x6, 0x1, 0x9f8}, 0x8, 0x5, &(0x7f0000000080)={{0xffffffff, 0x3, 0x0, 0x401}, &(0x7f0000000040)={{0x454, 0x9, 0x1f, 0x8}}}, 0xffbc, &(0x7f00000000c0)="b7e3d0f41607cdb325b751a0518b86354775a706d452d07ad01907bd195718cd57619285f117b4af7f485b52c1a504f7bfbc5954372e13d06260caee32bda57e20f0f6c4c345b5b5c7e76fa98f95dcdfe88f97284ed8", 0xcd76}}) ioctl$BINDER_WRITE_READ(r3, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:13:41 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x1, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000280)={0x423}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f00000000c0)=0x8) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000200)) 18:13:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x17c00, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:41 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x2, 0xfffffffffffffffe}}) 18:13:41 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000280)=""/90, 0x5a}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000400)=""/183, 0xb7}, {&(0x7f0000000100)=""/2, 0x2}, {&(0x7f00000004c0)=""/72, 0x48}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000540)=""/209, 0xd1}, {&(0x7f0000000640)=""/232, 0xe8}], 0xa, 0x0) 18:13:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x8000000000000000, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2153.680853][T30719] binder: 30718:30719 unknown command -1172937978 [ 2153.697428][T30719] binder: 30718:30719 ioctl c0306201 20000240 returned -22 18:13:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x7000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:42 executing program 4: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) 18:13:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000000c0)={'nat\x00', 0x2, [{}, {}]}, 0x48) 18:13:42 executing program 0: r0 = socket$vsock_dgram(0x28, 0x2, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x3) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000240)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) capset(&(0x7f00000001c0)={0x20080522, r5}, &(0x7f0000000200)={0x7ff, 0x0, 0x800, 0x5, 0x8, 0x9}) openat$cgroup_subtree(r0, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) getsockopt$inet_mreq(r3, 0x0, 0x27, &(0x7f00000002c0)={@loopback, @initdev}, &(0x7f0000000300)=0x8) sendfile(r1, r0, 0x0, 0x80000000) 18:13:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2153.985514][T30733] binder: BINDER_SET_CONTEXT_MGR already set [ 2154.019140][T30733] binder: 30729:30733 ioctl 40046207 0 returned -16 18:13:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$PR_SET_PDEATHSIG(0x1, 0x1c) r1 = syz_open_dev$binder(0x0, 0x0, 0x3) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10802, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f00000000c0)=0x10, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f5a46c0e9f3cd12"], 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000400)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:42 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) ioctl$TUNSETPERSIST(r0, 0x400454cc, 0x0) 18:13:42 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x8000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2154.350225][T30750] binder: 30748:30750 unknown command -1069131233 [ 2154.407782][T30750] binder: 30748:30750 ioctl c0306201 20000040 returned -22 18:13:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) r1 = dup2(r0, r0) ioctl$UI_SET_SWBIT(r1, 0x400455c8, 0x300) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() fchown(r1, r2, r3) r4 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) clone(0x1800000, &(0x7f0000000240)="e631112625dc605983fbe32eb8aabbcf6056207ce35fc38d4a9e01b76a98aa5e44ea986f14f00603a8cef059c5b463a81081c5755631f687c8dc88fa912a2fb8e09573a4c7446519bedf07929e8a161301318b7a90320262947861d5054021741534f836f93df973a41676153f12edf878f10c51fe4d6c93adc01b98395fa3b845ae7c1e8ce2d2ea53bde59aa4a6952c2dee35bbd2cf9e", &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000340)="276e5a123b3cdd61dcb8011becc52f9b2528030a0e7d21f5f339c7638f2b95cec2781a7f7f611df86a5dc3621807ac62320bb36822581d4fed13eeb8caf07c95ad861ec78dddb9d9551a13e16186bf3ddbb3944f821a508b6cac2ba2576c62ed654f644b577d6db87393bfbe6c8b7540c030502f58699ba620ed12") r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x110, r5, 0x8000000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:42 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") openat$vnet(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vhost-net\x00', 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000200)) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x4, 0x4) 18:13:43 executing program 0: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@initdev}}, &(0x7f00000000c0)=0xe8) quotactl(0x8000, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000380)="5c4f0e66d0e4fd48aec1bf66e8f325d73d32be8040a445af79ebdee9a23ac2689f788d0043b41cfc6c482d2c561cc934252d1f45442bb20128cc6ad3f753b164ebad02b38b878b80635457fbd4fade7cf863dfc870f317771c1f1a290cb8231d8e23397eafbdcea7bc3c4656e033bd7c141f56a79cb457b78595545d696a3f38dfcaf616df148956d78d1cc754209b6da22766914dc04a3e6349e3f93720d9d1ed3338f672a24572fece02291a1319357b6b345319c02c5cab30f7fef6a9dc30b320ef0970506b75db08fc1481c8140cedab14bdfbff10b93157b41e15f3fd2bce73c2a5e62e7dcf48e06c03208dc90278ea588635cfd4") 18:13:43 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000000)=0x54, 0x4) syz_emit_ethernet(0xd0, &(0x7f0000000200)={@broadcast, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x223}}, @icmp=@parameter_prob={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={0xac, 0x223}, @empty=0x1000000}}}}}}, 0x0) fcntl$dupfd(r0, 0x11, r0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007e5) 18:13:43 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RFLUSH(r1, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0463044000000008"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:43 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x160) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0xffffffffffffff7f, 0x60a0ba21, 0x1, 0x413, 0xd, 0xfffffffffffffddc, 0x0, 0x6b, 0x3, 0x17}) 18:13:43 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x4000) r1 = accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) recvfrom$unix(r0, &(0x7f0000000380)=""/226, 0xe2, 0x20, 0x0, 0xffffffffffffff70) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2156.715574][T30815] IPVS: ftp: loaded support on port[0] = 21 [ 2156.876015][ T5053] device bridge_slave_1 left promiscuous mode [ 2156.882436][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2156.939073][ T5053] device bridge_slave_0 left promiscuous mode [ 2156.945246][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.581275][ T5053] device hsr_slave_1 left promiscuous mode [ 2158.651617][ T5053] device hsr_slave_0 left promiscuous mode [ 2158.691660][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2158.704844][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2158.715673][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2158.754230][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2158.824399][ T5053] bond0 (unregistering): Released all slaves [ 2158.948430][T30815] chnl_net:caif_netlink_parms(): no params data found [ 2158.976071][T30815] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.983635][T30815] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.991256][T30815] device bridge_slave_0 entered promiscuous mode [ 2158.999050][T30815] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.006145][T30815] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.013860][T30815] device bridge_slave_1 entered promiscuous mode [ 2159.031465][T30815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2159.042669][T30815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2159.061862][T30815] team0: Port device team_slave_0 added [ 2159.069252][T30815] team0: Port device team_slave_1 added [ 2159.120239][T30815] device hsr_slave_0 entered promiscuous mode [ 2159.158589][T30815] device hsr_slave_1 entered promiscuous mode [ 2159.211121][T30815] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.218236][T30815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2159.225582][T30815] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.232703][T30815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2159.311122][T30815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2159.324592][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2159.333776][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.345609][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.354784][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2159.375928][T30815] 8021q: adding VLAN 0 to HW filter on device team0 [ 2159.415546][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2159.424407][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.431513][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2159.444638][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2159.453754][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.460880][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2159.475077][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2159.492742][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2159.500955][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2159.510407][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2159.523668][T30815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2159.535806][T30815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2159.546275][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2159.576297][T30815] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:48 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x22002180}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x216, 0x70bd2c, 0x25dfdbfc, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8001) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0}) r5 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={r4, 0x80000, r5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:48 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000001540)='/dev/snd/timer\x00', 0x0, 0x200100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x2}}) umount2(&(0x7f0000001840)='./file0\x00', 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001780)='/proc/self/net/pfkey\x00', 0x88000, 0x0) pidfd_send_signal(r1, 0x22, &(0x7f0000001880)={0x41, 0xffff, 0xcd}, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40, 0x0) pipe(&(0x7f00000017c0)) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000001500)=0xc) sendmsg$alg(r2, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001580)="34fe57c77f6a1d7fa371260c4e42b6a4b3b7bcfb8ed02acd25f212d656d99b59bfbee642a08cf1f5f09e57e57b815ae3fa614ba9e788c3c21649dc9227e11e4fd7b69013c7c6fd69ef5edd77e25fbaff4164f224f6511dce657c6c6db1a40e2d3497519c7ec985277f68f5a6dd7a76cd03624855a3d355fef8d1329db7bf06042203e1ac7eadb87c868fbd1baaa1ec7a86f0f9e62e723114245483f5a2c6fd058eccfb3ad6728e41fb7aeb38b1227d4ea15b2973ef4bfdaa9541ac80106d", 0xbe}, {&(0x7f0000001640)="d70d0f915b3e797d566d05aa6748eb88d3900454a4032022ae87b77179e362dad7a6260925a9e057c0a8b3983eaff517e90571f5983c793e3fe09f4c63e7c7ac", 0x40}], 0x2, &(0x7f00000016c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @assoc={0x18}, @op={0x18}], 0x60, 0x800}, 0x24000004) ptrace(0x10, r3) sendmsg$nfc_llcp(r2, &(0x7f00000014c0)={&(0x7f0000000100)={0x27, 0x0, 0x0, 0x7, 0x1f, 0x3, "5696216174524b28689b70e9934e40bbf649f4627a2159855a16f019be1680cb3297f2a3977a682a56260487794603b227e24d210ce3ac2cfadf34d3d978b1", 0x32}, 0x60, &(0x7f00000013c0)=[{&(0x7f0000000180)="4917fdcd5bc7990b8da180f793abcbc65b0ecebd95e2371275f021e430589229875b671c7a557c76e9140a6ba2bf2986e304", 0x32}, {&(0x7f00000001c0)="d4dacdeb019877291d0394d8d3032aa0dfa042340c4086f854cc1cf8a490d73d8d61179cacf8b423ad7cc66852665c7fb1885e96f2bb7bfed25c03d321636eb5bb0b3743bab5bc8f6e2f3fcb29883e94fd8da9acc423a71868169927d9c188c7cbf427933634b19226808e123fa6e92662f4dd3475d47465bddc7c2cbe60c17abdbd1b5d9927d7d0f5d2bec8a56f7a018d8f5f5be7f6629f7eda82d68bc632c7474841ce0ece1aa0f24f50bc775c2e485023d57581ce260ff0caab1ca574f2e7e3b41dbf9381c8787606a32eecb4ed24d26cc6895f8be5c8728a313653267bee", 0xe0}, {&(0x7f00000002c0)="d2f130ac8c626d43e1db8d30da8d4d94d5d7092891938b9dddf07ebf39ca439065a2defbe8376cafa4ab92b781b92af5e0cd621e3767f9f72928551d7a2b4c4c6ed663ade8e5ba1c8044fb0e44f501f5d75a18832a646dac1798aad0f826d176716db2873f7e68b9d3c54f24abbac8fc1a2630b24c114d5674714af308e5709170c038ee3aff0d7155fd8aedffeed049955aa3e11210a83b0f3ead314ca8988d16b48f7719bed52e8044539fe9533dea867b27dd9d77169d011da1fdf2ba3251db330f05b383420b34dd8d1dd0bde4f7aea3", 0xd2}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, &(0x7f0000001400)={0xb8, 0x100, 0x0, "9b7d21a2238ccf3f5f33ebf4ca13b04f532167c93baeb9a2975ad18a8ae9b5c41cb8b8a5425c2b621275a0ef56ee9debd456052da75d00f18892fba779f1d674f45deff2ad3f641fca50aadb12562881b35db22315949b12a3f89cf8748f3a159f62184381599dc62f971f9d3afb7797ed8c9e84876aee8b2af6b505a566380ff2ea7955f5d6f57c553461100f00a8044f3bacb966d7848d9447794934b0b7b7c418b231"}, 0xb8, 0x20000000}, 0x4) 18:13:48 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x9000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000001c0)=""/107) 18:13:48 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) r1 = socket$inet6_udplite(0x1c, 0x2, 0x88) getsockname$inet6(r1, 0x0, &(0x7f0000000080)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00956) [ 2159.977381][T30835] binder: 30828:30835 unknown command 7 [ 2159.998060][T30835] binder: 30828:30835 ioctl c0306201 20000040 returned -22 18:13:48 executing program 5: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x10}, 0xc) dup(r0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000002c0)) socket$can_raw(0x1d, 0x3, 0x1) r2 = dup(r1) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x7f, @remote, 0x822}}, 0x3, 0x80, 0x8000, 0x16, 0x6}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1f, 0xffffffffffff9f4a, 0x8, 0x9, 0x20}, 0x98) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2160.066223][T30842] binder: 30828:30842 unknown command 7 [ 2160.107006][T30842] binder: 30828:30842 ioctl c0306201 20000040 returned -22 18:13:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:48 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="feb9040400006714"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:48 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2160.437075][T30856] binder: 30855:30856 unknown command 67418622 [ 2160.450622][T30856] binder: 30855:30856 ioctl c0306201 20000040 returned -22 [ 2160.480220][T30857] binder: 30855:30857 unknown command 67418622 [ 2160.518000][T30857] binder: 30855:30857 ioctl c0306201 20000040 returned -22 18:13:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x802) r2 = getpgrp(0x0) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8000, 0x40) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r3, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10100}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x1e8, r4, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed12}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x124, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb82b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x824}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x813d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd619}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xee}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff7}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048011) sendmsg$unix(r3, &(0x7f0000000300)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000100)="9e364a92809519", 0x7}], 0x1, &(0x7f0000000200)=[@rights={{0x30, 0x1, 0x1, [r0, r0, r0, r0, r1, r1, r0, r1]}}], 0x30, 0x8800}, 0x800) sched_setscheduler(r2, 0x3, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xffffffffffffff3c, 0x0, &(0x7f0000000080), 0xffffffffffffffd0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0}) [ 2160.815735][T30868] binder: 30867:30868 ioctl c0306201 20000040 returned -14 [ 2160.829860][T30869] binder: 30867:30869 ioctl c0306201 20000040 returned -14 18:13:49 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:49 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xa000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:49 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup2(r0, r0) msgget$private(0x0, 0x0) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00496) shutdown(r1, 0x0) 18:13:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000000)={0x2}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs, 0x8) recvfrom$inet(r0, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00496) shutdown(r0, 0x0) 18:13:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x8800, 0x0) poll(&(0x7f0000000180)=[{r0, 0x2407}, {r2, 0x22}, {r0, 0x80}, {r0, 0x4000}, {r2, 0x5020}, {r2, 0x2000}, {r2}], 0x7, 0x2) syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x9, 0x40) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x149000, 0x0) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f00000000c0)=""/104) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0xfffffffffffffffc}, 0xfffffffffffffffd}) 18:13:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x10000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="04b748007e6feec1d1e2f2a0038c6a914b7368504737387fc14f3a09a9b08eee23635a31eea3bc3e4d5b9912d1434bb9c6229c89ec042a141c995bd8896547793c3e0f803132815f973add4506575364ecd9c734ea190bc024cfe9d2118f919ec3db74b2d5736ef0bede69c72e5207a75dd459cfb1e0e862db2540d365fa9e6e5eedbcbaef0a9300f1034fa3e791debb4fea18e4a7c195ecad2e91e19041c07bf1fdb81d282d88b72277492bbaba4028590a939f0afacdf9f5d34715800527145a6a42ed20514229a5137b8d6e178505b358c8926618380419320d4d89efd58436635849fcaa453348306bbdc6"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:50 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = dup(r0) sendto$inet6(r1, &(0x7f0000000080)="69fb8e93e61a022e0c038d79d4cf012322d71af0a46037c778331923ae6cde59f3d905115af993d55eb92fcb630a3f713b", 0x31, 0x20000, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007b8) 18:13:50 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x44, &(0x7f0000000000)=0x54, 0x4) fcntl$lock(r0, 0x0, &(0x7f00000001c0)={0x2, 0x0, 0x4}) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e007e5) [ 2161.826115][T30897] binder: 30893:30897 unknown command 4765444 [ 2161.862046][T30897] binder: 30893:30897 ioctl c0306201 20000040 returned -22 18:13:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2161.913634][T30905] binder: 30893:30905 unknown command 4765444 [ 2161.938586][T30905] binder: 30893:30905 ioctl c0306201 20000040 returned -22 18:13:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x2}, 0x0, 0x3e13, 0x3}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000080)={0x4, 0x1000, 0x2}) 18:13:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xfeb6b9f0b02e77af) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:50 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000200), &(0x7f00000001c0)=0x4) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000180)={0x3, 0x5}) 18:13:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x2c9, 0x0, &(0x7f00000000c0)=[@exit_looper], 0xd3, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2162.424034][T30928] Unknown ioctl 1074816013 [ 2162.466431][T30930] Unknown ioctl 1074816013 [ 2162.525907][T30934] binder: 30932:30934 unknown command 0 [ 2162.568306][T30934] binder: 30932:30934 ioctl c0306201 20000080 returned -22 [ 2162.612184][T30936] binder: 30932:30936 unknown command 0 [ 2162.648561][T30936] binder: 30932:30936 ioctl c0306201 20000080 returned -22 [ 2163.719368][ T5053] device bridge_slave_1 left promiscuous mode [ 2163.725579][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.779358][ T5053] device bridge_slave_0 left promiscuous mode [ 2163.785544][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.450200][ T5053] device hsr_slave_1 left promiscuous mode [ 2165.511641][ T5053] device hsr_slave_0 left promiscuous mode [ 2165.571618][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2165.582868][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2165.595867][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2165.634963][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2165.716986][ T5053] bond0 (unregistering): Released all slaves [ 2165.836740][T30946] IPVS: ftp: loaded support on port[0] = 21 [ 2165.899973][T30946] chnl_net:caif_netlink_parms(): no params data found [ 2165.929797][T30946] bridge0: port 1(bridge_slave_0) entered blocking state [ 2165.936982][T30946] bridge0: port 1(bridge_slave_0) entered disabled state [ 2165.944901][T30946] device bridge_slave_0 entered promiscuous mode [ 2165.953107][T30946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2165.960370][T30946] bridge0: port 2(bridge_slave_1) entered disabled state [ 2165.968391][T30946] device bridge_slave_1 entered promiscuous mode [ 2165.990415][T30946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2166.001468][T30946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2166.026265][T30946] team0: Port device team_slave_0 added [ 2166.033818][T30946] team0: Port device team_slave_1 added [ 2166.090442][T30946] device hsr_slave_0 entered promiscuous mode [ 2166.128614][T30946] device hsr_slave_1 entered promiscuous mode [ 2166.233867][T30946] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.241123][T30946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2166.248547][T30946] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.255593][T30946] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2166.305962][T30946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2166.321268][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2166.330710][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.339048][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.354198][T30946] 8021q: adding VLAN 0 to HW filter on device team0 [ 2166.366560][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2166.376120][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.383274][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2166.412041][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2166.421856][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.428960][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2166.440554][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2166.449778][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2166.467917][T30946] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2166.479055][T30946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2166.494966][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2166.504195][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2166.513933][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2166.535196][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2166.550108][T30946] 8021q: adding VLAN 0 to HW filter on device batadv0 18:13:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x20000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:55 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 18:13:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:55 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, &(0x7f0000000080)) 18:13:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x80000, 0x0) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000100)={0x58, 0x2, 0x100, 0x2, 0x401, 0x9}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) fcntl$setflags(r0, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100010000000000ca87cb1b59c7e8ce3177387ea0d70572dc800b190d37c5618666646ccd75cd0c85a6e80aad7f8565dadb192d"], 0x0, 0x0, 0x0}) 18:13:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}, 0x0, 0x4, 0x4}) pipe(&(0x7f0000002640)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000025c0)=""/97) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000002400)=0x0) getresuid(&(0x7f0000002440)=0x0, &(0x7f0000002480)=0x0, &(0x7f00000024c0)) r5 = getgid() ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000026c0)=ANY=[@ANYBLOB="06004ebfcebe4006b3a601000000000002000048bb0ddaf33fcbb71d", @ANYRES32=r0, @ANYBLOB="00000000010000000100"/28, @ANYRES32=r0, @ANYBLOB="00000000f400"/28]) sendmsg$unix(r1, &(0x7f0000002580)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000180)}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="f544255c605ddd18c4621c1974e46ada4fda5eefcf7808519debb8ae1b6cc874937f9eb7608d50e3c115667da1c04c31891e49c1112e576221ac762a13220c5b6d20d55b9b557b56fda462753933a076ee4474fc8e0efdaa9bceb6f186af729d2650934bed6560d9383275235203fcf71dc4b85979d6d1a182097a80581a72b7f972c9e2953dc65c228a93f7ad24e59958658b81f5213069d81203c38472dcf638bb29d0034d1ccff8c0bd8fbf69072de0613001f9a7904bb258341ecdea55542ed0c3b0b5b5f2042b6a4a1a8374d551cdb1ceb3af11491c65a9ba68947d0cedc8ab9b5c4efacec8cb71f22138f2b90486590529", 0xf4}, {&(0x7f00000022c0)="1fb19bb8e5b6629490e8c2886853e1d728f16fac4861bf93f1cb6c09342e02f566603a815e3a80bcf428d828a54758c2e778a49aaaae23107ff59bd53f62a9113e043b2411f22ef3d9", 0x49}, {&(0x7f0000002340)="1f02e19f2b4d39216e4c2cc16a6ec4c32d8079bfed69b802314633a7eab4d8c2b5afe0403a2a90fe9e15ef261bd143973ea52ad9d558730aab6451475d2e", 0x3e}], 0x6, &(0x7f0000002500)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r5}}}], 0x78, 0x2400c040}, 0x10) chown(&(0x7f0000000180)='./file0\x00', r4, r5) 18:13:55 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) [ 2167.045951][T30969] binder: 30963:30969 unknown command 65537 [ 2167.078342][T30969] binder: 30963:30969 ioctl c0306201 20000240 returned -22 18:13:55 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x20000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x100000002, 0x80000}, 0x0, 0x800}) 18:13:55 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x404001, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000640)=0xe8) syz_mount_image$iso9660(&(0x7f0000000280)='iso9660\x00', &(0x7f00000002c0)='./file0\x00', 0x100, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000300)="91f824473e4983d1e60ab917c92e5561b7916c411941872ab7058256ad8324b4f04689f2", 0x24, 0x1000}, {&(0x7f0000000340)="d0b5fb575f229ad710a3dbd0d712cd321e17f15e7bcc2b0077ff8eef5624017652e8ae2779147e5309f8ed65db00ffc0f93c40167d594535eb31a61eb37470448ce6e0bdb03db5e456a2b657f6e2a05e7a4197c3dd50b6a5f038802a09fbee916d29bacf620eb101bdfd78436de799cc6a2c820489478eb3f003c0d29055f42c26e839b6fc684e29ba94375c4197ed7fbeb7106770d8551f31ec75a0aca2d8bc1b9b0d53dca8adc6b509d74facebfcbd2c8f40", 0xb3, 0x80}, {&(0x7f0000000400)="c95e98698d3a296971c1a7880e05ce4b0b294cbe2a9a39fba0e2243be777c4703b1983b45ff1c16210c294384db228163b4f2b25cdfeac1c646d8e97ad35bad206b3fe9320dbb44cd6747f39c3efebec72200d8928d3659001c60fed73da0bd5f983d262c71e7151ca4563d95eef198929b68b288603d2bd933987539dd89b949548afbe99b65b421e1650c826cfb96c13f9e638822956f8c4865c894d849237466eb2ce37f515a258f11b87a1fffe626b045cd9877779a1c5fef532a6f2e5c6", 0xc0, 0x1}], 0x0, &(0x7f0000000680)={[{@map_normal='map=normal'}, {@dmode={'dmode', 0x3d, 0x7}}, {@sbsector={'sbsector', 0x3d, 0x3}}, {@check_strict='check=strict'}, {@hide='hide'}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/binder#\x00'}}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@euid_eq={'euid', 0x3d, r1}}]}) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="ff0000000000000025c60d08755e18173cd806caedf043f019dadfcac5f2e53618ffd80ba9eb2eb004151abc9d33e539da45530297eebd5359f97bbd21fab2f7b19783b9fccb3ca084f428791284"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r3 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x0, 0xd80) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f00000000c0)) 18:13:55 executing program 2: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x7f, 0x0, 0xa, 0xa, 0x0, 0x81}) 18:13:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:55 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x20100000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:56 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4000) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 18:13:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0x1) 18:13:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x20, 0x1) close(r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000001440)={0x0, @in={{0x2, 0x4e20, @rand_addr=0xfffffffffffffff8}}, [0x3, 0xfffffffeffffffff, 0x2, 0xffff, 0x100, 0x3, 0x9, 0x280000000, 0x80000000, 0x2, 0x5, 0x7, 0x240a, 0x1f, 0x511a]}, &(0x7f0000001540)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000017c0)={0x0, 0xa4, 0x80, 0xff}, &(0x7f0000001800)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000001840)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}, 0x6, 0x1}, &(0x7f0000001900)=0x90) sendmmsg$inet_sctp(r1, &(0x7f0000001f80)=[{&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x401, @dev={0xfe, 0x80, [], 0x1f}, 0x7f}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)="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", 0x1000}], 0x2, &(0x7f0000002040)=ANY=[@ANYBLOB="3000000000000000840000000100000000000700050000000010000000feffff050000000000000000010000", @ANYRES32=r2, @ANYBLOB="1800000000000000840000000000000009000200ff01d4002000000000a0ee97b0c0e31e9c000000ff01000000000000000000000000000120000000840000000800000000000000000000000000000001000000244855f53094e58dba96e9569996e39e73d83ea017bc0c84c8af000000000000000025de6144c7262462ca"], 0x88, 0x240480c0}, {&(0x7f0000001640)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001680)="43650c2a9bf680d873d1d1b4443cf8e427867bb5d7cc2e2222b22c896a3b633baa580285500c9d6966c0115992ede68599f231802c397e05d35492c1b26584ea7db2e76e85e2ffc55acd032a7866fcbe80e34cb23d322700859b26e9dc7af12648db59a3600ba953694f417eee219134ba07c2d904a280bf2f5bc0f5aae5eb7aa37f35f8447037e12c03a7d5c1aedd433bd0acb0913880a169666f7e92a1e5ecfe06841cc412a5ba831343cef26ae531f4aad19b33588765e848d6ee75989ac3b7da2563512c0256b5614feff4e61de6b207d537a4314369c0ab094cfb9d4214109b545997ebe75077b316c592eb289e0e5fb2d4f2a3", 0xf6}], 0x1, &(0x7f0000001940)=[@authinfo={0x18}, @sndrcv={0x30, 0x84, 0x1, {0x54d, 0x800, 0x209, 0x100, 0x3, 0x8001, 0x100000000, 0x6, r3}}, @init={0x18, 0x84, 0x0, {0x6, 0xfffffffffffffff7, 0x7, 0x8000}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffb, 0xfffffffffffff9c3, 0x8008, 0x1, 0x2, 0x5, 0xe4, 0x8da, r4}}], 0x90, 0x40000}, {&(0x7f0000001a00)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000001f00)=[{&(0x7f0000001a40)="feffa1a64d025c7f43a9acad505ce6abb85ef8bcdb95bff2d944a144886f16acf3c8e7fa4df17e59d44c46d14267574b6b47cf6ab1ae4c4cb7b37f52da6a3c0c7dd39be02313895a3d44fd1b2211fa4474739b1d9ca1b7bf87ed0df84a1c7044e01d026b97d66d42cf1b95f712d4222ea417dc563ccebb1154c0294e5f0c99bdbd9066bef7390692acf4b9fa5e5448ede9aff6d499017173eaf5b1874554361f0660c879391d027c8df36f526842f25834e72f8d65890f336f8ec961f9cd666e426bd4a6c74b54e768575678ae82518381ce7723a30e8f2cf157f63eae92e8b807dec0201b08018a80c142d3a32a95028c", 0xf1}, {&(0x7f0000001b40)="b56477e83767fb16e71840d7c92b6fe2168e53df053d4f65f3c6641cdc78a221dc4647ccb625d5af55251d9489fb9ac8698c26f7737aad08b306", 0x3a}, {&(0x7f0000001b80)="dfc6ee7f6ab591fe8fcf5a141059c2319c3c7a3b4ce2a5d31c9bc829c8e0d5a7418a75058665b65d94f95f6b1205e0615b25a2f2d345e803f0adb80296180d86f42d9dc0f16e592a1f93480dd7660e5742253b0911c05eb2f6a3da8a598d6a7a5c3432498fc816993a484eece10ed239fb394891443cba85559b4d1cc1c75c22c8f99fc2cc2003e9e8ea57ff654d6074be9c", 0x92}, {&(0x7f0000001c40)="5e191e5db00e07e79d9f5bb77ddf518af59397b27296863d440b36f15b4ff82078ad6aa6ca963091a1645af99c284bcb67d3d721fdfb5bbffc4187c1be07f9dc379b4ad84e6fea687426117dc23a0bc478a56229590f0511c348164e35432b2537d96827d03e1fa7303ed4c5caef8dc1e5e7b4acf8efc03ca23673f13b87055bf7c923c5356aacc94850770cf0f0c879d15fc4dd506c8360b9dfd449e7d8786105a95f094249bb52bdbd3e59180137b1c61f2da435352818430bd56eef7b8e3e4a42a670f1d5b06522d25626add6ea565d781232497d44c6650a3d153d5746d3ea065b97566a60e6258346d418d5ea4803c3a892", 0xf4}, {&(0x7f0000001d40)="8c05a77a24349176300ef01e7ee0fc2b2293f1785114d9319e06b2da48ac0f1ba0a45b30c2757519581ca18851add1eacf2b2dbb2cc6f550699462a21c2d0fea66b1a7c42272d5464d48f5c74674663e4e173128b64e24900810a7291339473c51d6b691e6238a855f", 0x69}, {&(0x7f0000001dc0)="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", 0xfc}, {&(0x7f0000001ec0)="04da22402edaf0326e0ec575147af344936f4f2846d562ca3672dd6bf9ca68bccefaf59610726cba31b9be31b16062", 0x2f}], 0x7, 0x0, 0x0, 0x40000}], 0x3, 0x8000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="580000008388298e8d26dff4b67c526a69322793a592460b385a991c8182bcf3a39a3a75adaa878484fe60585f1c1d668141dcb6fb461bc6418fc3b0f2e3476dd2efbdaf83c9e615b74c6512c0f41cc9b69448cc59c7605a0462275bbf97d58719060ef6ec23b8c84f2680c4f2bed1e40cf7d2a536cfeeb80fe9f09faa83c18ded3d1c5d585570b05ca2de3412"], &(0x7f0000000180)=0x2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e22, @multicast1}}, 0x90, 0x3, 0x7f, 0x6, 0x5}, 0x98) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x3, 0x80000000}, 0x0, 0x3}) 18:13:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2168.032963][T31007] binder: 31001:31007 ioctl 40087602 20000080 returned -22 [ 2168.088811][T31011] binder: 31001:31011 ioctl 40087602 20000080 returned -22 18:13:56 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:13:56 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3f000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:13:56 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) 18:13:56 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x2001, 0x0) ioctl$SG_GET_LOW_DMA(r1, 0x227a, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:13:56 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x10080, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e20, @local}, {0x307, @remote}, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_bridge\x00'}) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) [ 2168.562406][T31006] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 18:13:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2168.562441][T31006] loop2: partition table partially beyond EOD, truncated [ 2168.701167][T31006] loop2: p1 size 2 extends beyond EOD, truncated 18:13:57 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x40000042) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) recvfrom$netrom(r1, &(0x7f0000000280)=""/235, 0xeb, 0x1, &(0x7f0000000380)={{0x3, @null, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}, 0x48) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04610440000000ef"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80442, 0x0) [ 2168.768458][T31006] loop2: p4 start 1854537728 is beyond EOD, truncated [ 2168.850852][T31006] loop2: p5 start 1854537728 is beyond EOD, truncated [ 2168.868669][T31006] loop2: p6 start 1854537728 is beyond EOD, truncated [ 2168.875458][T31006] loop2: p7 start 1854537728 is beyond EOD, truncated [ 2168.944220][T31006] loop2: p8 start 1854537728 is beyond EOD, truncated [ 2168.972838][T31043] binder: 31040:31043 unknown command 1074028804 [ 2169.005439][T31043] binder: 31040:31043 ioctl c0306201 20000040 returned -22 [ 2169.064411][T31006] loop2: p9 start 1854537728 is beyond EOD, truncated [ 2169.086245][T31006] loop2: p10 start 1854537728 is beyond EOD, truncated [ 2169.115753][T31006] loop2: p11 start 1854537728 is beyond EOD, truncated [ 2169.153030][T31006] loop2: p12 start 1854537728 is beyond EOD, truncated [ 2169.169062][T31006] loop2: p13 start 1854537728 is beyond EOD, truncated [ 2169.180213][T31006] loop2: p14 start 1854537728 is beyond EOD, truncated [ 2169.188845][T31006] loop2: p15 start 1854537728 is beyond EOD, truncated [ 2169.198759][T31006] loop2: p16 start 1854537728 is beyond EOD, truncated [ 2169.207208][T31006] loop2: p17 start 1854537728 is beyond EOD, truncated [ 2169.215376][T31006] loop2: p18 start 1854537728 is beyond EOD, truncated [ 2169.224005][T31006] loop2: p19 start 1854537728 is beyond EOD, truncated [ 2169.232320][T31006] loop2: p20 start 1854537728 is beyond EOD, truncated [ 2169.259854][T31006] loop2: p21 start 1854537728 is beyond EOD, truncated [ 2169.284381][T31006] loop2: p22 start 1854537728 is beyond EOD, truncated [ 2169.313908][T31006] loop2: p23 start 1854537728 is beyond EOD, truncated [ 2169.333994][T31006] loop2: p24 start 1854537728 is beyond EOD, truncated [ 2169.354083][T31006] loop2: p25 start 1854537728 is beyond EOD, truncated [ 2169.384496][T31006] loop2: p26 start 1854537728 is beyond EOD, truncated [ 2169.403633][T31006] loop2: p27 start 1854537728 is beyond EOD, truncated [ 2169.423675][T31006] loop2: p28 start 1854537728 is beyond EOD, truncated [ 2169.449460][T31006] loop2: p29 start 1854537728 is beyond EOD, truncated [ 2169.456650][T31006] loop2: p30 start 1854537728 is beyond EOD, truncated [ 2169.463847][T31006] loop2: p31 start 1854537728 is beyond EOD, truncated [ 2169.470942][T31006] loop2: p32 start 1854537728 is beyond EOD, truncated [ 2169.478511][T31006] loop2: p33 start 1854537728 is beyond EOD, truncated [ 2169.485420][T31006] loop2: p34 start 1854537728 is beyond EOD, truncated [ 2169.492941][T31006] loop2: p35 start 1854537728 is beyond EOD, truncated [ 2169.499985][T31006] loop2: p36 start 1854537728 is beyond EOD, truncated [ 2169.506942][T31006] loop2: p37 start 1854537728 is beyond EOD, truncated [ 2169.513984][T31006] loop2: p38 start 1854537728 is beyond EOD, truncated [ 2169.520993][T31006] loop2: p39 start 1854537728 is beyond EOD, truncated [ 2169.527906][T31006] loop2: p40 start 1854537728 is beyond EOD, truncated [ 2169.534872][T31006] loop2: p41 start 1854537728 is beyond EOD, truncated [ 2169.541820][T31006] loop2: p42 start 1854537728 is beyond EOD, truncated [ 2169.548804][T31006] loop2: p43 start 1854537728 is beyond EOD, truncated [ 2169.555737][T31006] loop2: p44 start 1854537728 is beyond EOD, truncated [ 2169.562777][T31006] loop2: p45 start 1854537728 is beyond EOD, truncated [ 2169.569743][T31006] loop2: p46 start 1854537728 is beyond EOD, truncated [ 2169.576666][T31006] loop2: p47 start 1854537728 is beyond EOD, truncated [ 2169.583663][T31006] loop2: p48 start 1854537728 is beyond EOD, truncated [ 2169.590623][T31006] loop2: p49 start 1854537728 is beyond EOD, truncated [ 2169.597514][T31006] loop2: p50 start 1854537728 is beyond EOD, truncated [ 2169.604505][T31006] loop2: p51 start 1854537728 is beyond EOD, truncated [ 2169.611545][T31006] loop2: p52 start 1854537728 is beyond EOD, truncated [ 2169.619352][T31006] loop2: p53 start 1854537728 is beyond EOD, truncated [ 2169.626329][T31006] loop2: p54 start 1854537728 is beyond EOD, truncated [ 2169.633364][T31006] loop2: p55 start 1854537728 is beyond EOD, truncated [ 2169.640372][T31006] loop2: p56 start 1854537728 is beyond EOD, truncated [ 2169.647283][T31006] loop2: p57 start 1854537728 is beyond EOD, truncated [ 2169.654313][T31006] loop2: p58 start 1854537728 is beyond EOD, truncated [ 2169.661278][T31006] loop2: p59 start 1854537728 is beyond EOD, truncated [ 2169.668338][T31006] loop2: p60 start 1854537728 is beyond EOD, truncated [ 2169.675264][T31006] loop2: p61 start 1854537728 is beyond EOD, truncated [ 2169.682245][T31006] loop2: p62 start 1854537728 is beyond EOD, truncated [ 2169.689322][T31006] loop2: p63 start 1854537728 is beyond EOD, truncated [ 2169.696294][T31006] loop2: p64 start 1854537728 is beyond EOD, truncated [ 2169.703308][T31006] loop2: p65 start 1854537728 is beyond EOD, truncated [ 2169.710275][T31006] loop2: p66 start 1854537728 is beyond EOD, truncated [ 2169.717178][T31006] loop2: p67 start 1854537728 is beyond EOD, truncated [ 2169.724212][T31006] loop2: p68 start 1854537728 is beyond EOD, truncated [ 2169.731191][T31006] loop2: p69 start 1854537728 is beyond EOD, truncated [ 2169.738082][T31006] loop2: p70 start 1854537728 is beyond EOD, truncated [ 2169.745124][T31006] loop2: p71 start 1854537728 is beyond EOD, truncated [ 2169.752656][T31006] loop2: p72 start 1854537728 is beyond EOD, truncated [ 2169.759660][T31006] loop2: p73 start 1854537728 is beyond EOD, truncated [ 2169.766591][T31006] loop2: p74 start 1854537728 is beyond EOD, truncated [ 2169.773571][T31006] loop2: p75 start 1854537728 is beyond EOD, truncated [ 2169.780553][T31006] loop2: p76 start 1854537728 is beyond EOD, truncated [ 2169.787546][T31006] loop2: p77 start 1854537728 is beyond EOD, truncated [ 2169.794527][T31006] loop2: p78 start 1854537728 is beyond EOD, truncated [ 2169.801476][T31006] loop2: p79 start 1854537728 is beyond EOD, truncated [ 2169.808536][T31006] loop2: p80 start 1854537728 is beyond EOD, truncated [ 2169.815449][T31006] loop2: p81 start 1854537728 is beyond EOD, truncated [ 2169.822402][T31006] loop2: p82 start 1854537728 is beyond EOD, truncated [ 2169.829379][T31006] loop2: p83 start 1854537728 is beyond EOD, truncated [ 2169.836281][T31006] loop2: p84 start 1854537728 is beyond EOD, truncated [ 2169.843254][T31006] loop2: p85 start 1854537728 is beyond EOD, truncated [ 2169.850223][T31006] loop2: p86 start 1854537728 is beyond EOD, truncated [ 2169.857202][T31006] loop2: p87 start 1854537728 is beyond EOD, truncated [ 2169.864176][T31006] loop2: p88 start 1854537728 is beyond EOD, truncated [ 2169.871231][T31006] loop2: p89 start 1854537728 is beyond EOD, truncated [ 2169.879039][T31006] loop2: p90 start 1854537728 is beyond EOD, truncated [ 2169.886054][T31006] loop2: p91 start 1854537728 is beyond EOD, truncated [ 2169.893066][T31006] loop2: p92 start 1854537728 is beyond EOD, truncated [ 2169.900790][T31006] loop2: p93 start 1854537728 is beyond EOD, truncated [ 2169.907640][T31006] loop2: p94 start 1854537728 is beyond EOD, truncated [ 2169.914664][T31006] loop2: p95 start 1854537728 is beyond EOD, truncated [ 2169.921663][T31006] loop2: p96 start 1854537728 is beyond EOD, truncated [ 2169.928666][T31006] loop2: p97 start 1854537728 is beyond EOD, truncated [ 2169.935581][T31006] loop2: p98 start 1854537728 is beyond EOD, truncated [ 2169.942550][T31006] loop2: p99 start 1854537728 is beyond EOD, truncated [ 2169.949567][T31006] loop2: p100 start 1854537728 is beyond EOD, truncated [ 2169.956580][T31006] loop2: p101 start 1854537728 is beyond EOD, truncated [ 2169.963622][T31006] loop2: p102 start 1854537728 is beyond EOD, truncated [ 2169.970755][T31006] loop2: p103 start 1854537728 is beyond EOD, truncated [ 2169.977789][T31006] loop2: p104 start 1854537728 is beyond EOD, truncated [ 2169.984857][T31006] loop2: p105 start 1854537728 is beyond EOD, truncated [ 2169.991943][T31006] loop2: p106 start 1854537728 is beyond EOD, truncated [ 2169.999038][T31006] loop2: p107 start 1854537728 is beyond EOD, truncated [ 2170.006039][T31006] loop2: p108 start 1854537728 is beyond EOD, truncated [ 2170.013935][T31006] loop2: p109 start 1854537728 is beyond EOD, truncated [ 2170.021078][T31006] loop2: p110 start 1854537728 is beyond EOD, truncated [ 2170.028180][T31006] loop2: p111 start 1854537728 is beyond EOD, truncated [ 2170.035237][T31006] loop2: p112 start 1854537728 is beyond EOD, truncated [ 2170.042371][T31006] loop2: p113 start 1854537728 is beyond EOD, truncated [ 2170.049452][T31006] loop2: p114 start 1854537728 is beyond EOD, truncated [ 2170.056470][T31006] loop2: p115 start 1854537728 is beyond EOD, truncated [ 2170.063538][T31006] loop2: p116 start 1854537728 is beyond EOD, truncated [ 2170.070578][T31006] loop2: p117 start 1854537728 is beyond EOD, truncated [ 2170.077563][T31006] loop2: p118 start 1854537728 is beyond EOD, truncated [ 2170.084890][T31006] loop2: p119 start 1854537728 is beyond EOD, truncated [ 2170.092072][T31006] loop2: p120 start 1854537728 is beyond EOD, truncated [ 2170.099404][T31006] loop2: p121 start 1854537728 is beyond EOD, truncated [ 2170.106612][T31006] loop2: p122 start 1854537728 is beyond EOD, truncated [ 2170.113836][T31006] loop2: p123 start 1854537728 is beyond EOD, truncated [ 2170.121131][T31006] loop2: p124 start 1854537728 is beyond EOD, truncated [ 2170.130269][T31006] loop2: p125 start 1854537728 is beyond EOD, truncated [ 2170.138068][T31006] loop2: p126 start 1854537728 is beyond EOD, truncated [ 2170.146243][T31006] loop2: p127 start 1854537728 is beyond EOD, truncated [ 2170.153576][T31006] loop2: p128 start 1854537728 is beyond EOD, truncated [ 2170.160797][T31006] loop2: p129 start 1854537728 is beyond EOD, truncated [ 2170.168044][T31006] loop2: p130 start 1854537728 is beyond EOD, truncated [ 2170.175967][T31006] loop2: p131 start 1854537728 is beyond EOD, truncated [ 2170.183237][T31006] loop2: p132 start 1854537728 is beyond EOD, truncated [ 2170.196957][T31006] loop2: p133 start 1854537728 is beyond EOD, truncated [ 2170.205925][T31006] loop2: p134 start 1854537728 is beyond EOD, truncated [ 2170.216289][T31006] loop2: p135 start 1854537728 is beyond EOD, truncated [ 2170.223420][T31006] loop2: p136 start 1854537728 is beyond EOD, truncated [ 2170.230581][T31006] loop2: p137 start 1854537728 is beyond EOD, truncated [ 2170.237515][T31006] loop2: p138 start 1854537728 is beyond EOD, truncated [ 2170.244648][T31006] loop2: p139 start 1854537728 is beyond EOD, truncated [ 2170.251785][T31006] loop2: p140 start 1854537728 is beyond EOD, truncated [ 2170.258868][T31006] loop2: p141 start 1854537728 is beyond EOD, truncated [ 2170.265912][T31006] loop2: p142 start 1854537728 is beyond EOD, truncated [ 2170.273775][T31006] loop2: p143 start 1854537728 is beyond EOD, truncated [ 2170.280891][T31006] loop2: p144 start 1854537728 is beyond EOD, truncated [ 2170.287970][T31006] loop2: p145 start 1854537728 is beyond EOD, truncated [ 2170.295073][T31006] loop2: p146 start 1854537728 is beyond EOD, truncated [ 2170.302176][T31006] loop2: p147 start 1854537728 is beyond EOD, truncated [ 2170.309376][T31006] loop2: p148 start 1854537728 is beyond EOD, truncated [ 2170.316396][T31006] loop2: p149 start 1854537728 is beyond EOD, truncated [ 2170.323597][T31006] loop2: p150 start 1854537728 is beyond EOD, truncated [ 2170.330846][T31006] loop2: p151 start 1854537728 is beyond EOD, truncated [ 2170.337863][T31006] loop2: p152 start 1854537728 is beyond EOD, truncated [ 2170.345044][T31006] loop2: p153 start 1854537728 is beyond EOD, truncated [ 2170.352257][T31006] loop2: p154 start 1854537728 is beyond EOD, truncated [ 2170.359442][T31006] loop2: p155 start 1854537728 is beyond EOD, truncated [ 2170.366445][T31006] loop2: p156 start 1854537728 is beyond EOD, truncated [ 2170.373639][T31006] loop2: p157 start 1854537728 is beyond EOD, truncated [ 2170.380834][T31006] loop2: p158 start 1854537728 is beyond EOD, truncated [ 2170.387837][T31006] loop2: p159 start 1854537728 is beyond EOD, truncated [ 2170.395095][T31006] loop2: p160 start 1854537728 is beyond EOD, truncated [ 2170.403027][T31006] loop2: p161 start 1854537728 is beyond EOD, truncated [ 2170.410261][T31006] loop2: p162 start 1854537728 is beyond EOD, truncated [ 2170.417308][T31006] loop2: p163 start 1854537728 is beyond EOD, truncated [ 2170.424561][T31006] loop2: p164 start 1854537728 is beyond EOD, truncated [ 2170.431814][T31006] loop2: p165 start 1854537728 is beyond EOD, truncated [ 2170.439900][T31006] loop2: p166 start 1854537728 is beyond EOD, truncated [ 2170.446944][T31006] loop2: p167 start 1854537728 is beyond EOD, truncated [ 2170.454231][T31006] loop2: p168 start 1854537728 is beyond EOD, truncated [ 2170.461369][T31006] loop2: p169 start 1854537728 is beyond EOD, truncated [ 2170.468737][T31006] loop2: p170 start 1854537728 is beyond EOD, truncated [ 2170.475990][T31006] loop2: p171 start 1854537728 is beyond EOD, truncated [ 2170.484383][T31006] loop2: p172 start 1854537728 is beyond EOD, truncated [ 2170.492885][T31006] loop2: p173 start 1854537728 is beyond EOD, truncated [ 2170.500031][T31006] loop2: p174 start 1854537728 is beyond EOD, truncated [ 2170.507281][T31006] loop2: p175 start 1854537728 is beyond EOD, truncated [ 2170.514834][T31006] loop2: p176 start 1854537728 is beyond EOD, truncated [ 2170.522249][T31006] loop2: p177 start 1854537728 is beyond EOD, truncated [ 2170.529825][T31006] loop2: p178 start 1854537728 is beyond EOD, truncated [ 2170.536878][T31006] loop2: p179 start 1854537728 is beyond EOD, truncated [ 2170.543960][T31006] loop2: p180 start 1854537728 is beyond EOD, truncated [ 2170.551128][T31006] loop2: p181 start 1854537728 is beyond EOD, truncated [ 2170.558600][T31006] loop2: p182 start 1854537728 is beyond EOD, truncated [ 2170.565614][T31006] loop2: p183 start 1854537728 is beyond EOD, truncated [ 2170.572890][T31006] loop2: p184 start 1854537728 is beyond EOD, truncated [ 2170.580411][T31006] loop2: p185 start 1854537728 is beyond EOD, truncated [ 2170.595391][T31006] loop2: p186 start 1854537728 is beyond EOD, truncated [ 2170.628264][T31006] loop2: p187 start 1854537728 is beyond EOD, truncated [ 2170.635292][T31006] loop2: p188 start 1854537728 is beyond EOD, truncated [ 2170.654445][T31006] loop2: p189 start 1854537728 is beyond EOD, truncated [ 2170.665411][T31006] loop2: p190 start 1854537728 is beyond EOD, truncated [ 2170.678069][T31006] loop2: p191 start 1854537728 is beyond EOD, truncated [ 2170.685300][T31006] loop2: p192 start 1854537728 is beyond EOD, truncated [ 2170.697792][T31006] loop2: p193 start 1854537728 is beyond EOD, truncated [ 2170.705090][T31006] loop2: p194 start 1854537728 is beyond EOD, truncated [ 2170.717470][T31006] loop2: p195 start 1854537728 is beyond EOD, truncated [ 2170.723634][T31049] IPVS: ftp: loaded support on port[0] = 21 [ 2170.725138][T31006] loop2: p196 start 1854537728 is beyond EOD, truncated [ 2170.737914][T31006] loop2: p197 start 1854537728 is beyond EOD, truncated [ 2170.745726][T31006] loop2: p198 start 1854537728 is beyond EOD, truncated [ 2170.753314][T31006] loop2: p199 start 1854537728 is beyond EOD, truncated [ 2170.761015][T31006] loop2: p200 start 1854537728 is beyond EOD, truncated [ 2170.768475][T31006] loop2: p201 start 1854537728 is beyond EOD, truncated [ 2170.776010][T31006] loop2: p202 start 1854537728 is beyond EOD, [ 2170.782917][T31006] truncated [ 2170.798311][T31006] loop2: p203 start 1854537728 is beyond EOD, truncated [ 2170.805366][T31006] loop2: p204 start 1854537728 is beyond EOD, truncated [ 2170.812567][T31006] loop2: p205 start 1854537728 is beyond EOD, truncated [ 2170.819896][T31006] loop2: p206 start 1854537728 is beyond EOD, truncated [ 2170.826942][T31006] loop2: p207 start 1854537728 is beyond EOD, truncated [ 2170.834175][T31006] loop2: p208 start 1854537728 is beyond EOD, truncated [ 2170.841337][T31006] loop2: p209 start 1854537728 is beyond EOD, truncated [ 2170.848539][T31006] loop2: p210 start 1854537728 is beyond EOD, truncated [ 2170.855564][T31006] loop2: p211 start 1854537728 is beyond EOD, truncated [ 2170.862724][T31006] loop2: p212 start 1854537728 is beyond EOD, truncated [ 2170.869916][T31006] loop2: p213 start 1854537728 is beyond EOD, truncated [ 2170.876917][T31006] loop2: p214 start 1854537728 is beyond EOD, truncated [ 2170.884122][T31006] loop2: p215 start 1854537728 is beyond EOD, truncated [ 2170.891373][T31006] loop2: p216 start 1854537728 is beyond EOD, truncated [ 2170.898531][T31006] loop2: p217 start 1854537728 is beyond EOD, truncated [ 2170.905535][T31006] loop2: p218 start 1854537728 is beyond EOD, truncated [ 2170.912724][T31006] loop2: p219 start 1854537728 is beyond EOD, truncated [ 2170.920682][T31006] loop2: p220 start 1854537728 is beyond EOD, truncated [ 2170.927674][T31006] loop2: p221 start 1854537728 is beyond EOD, truncated [ 2170.934852][T31006] loop2: p222 start 1854537728 is beyond EOD, truncated [ 2170.941983][T31006] loop2: p223 start 1854537728 is beyond EOD, truncated [ 2170.949038][T31006] loop2: p224 start 1854537728 is beyond EOD, truncated [ 2170.949051][T31006] loop2: p225 start 1854537728 is beyond EOD, truncated [ 2170.949063][T31006] loop2: p226 start 1854537728 is beyond EOD, truncated [ 2170.949075][T31006] loop2: p227 start 1854537728 is beyond EOD, truncated [ 2170.949086][T31006] loop2: p228 start 1854537728 is beyond EOD, truncated [ 2170.949097][T31006] loop2: p229 start 1854537728 is beyond EOD, truncated [ 2170.949108][T31006] loop2: p230 start 1854537728 is beyond EOD, truncated [ 2170.949119][T31006] loop2: p231 start 1854537728 is beyond EOD, truncated [ 2170.949130][T31006] loop2: p232 start 1854537728 is beyond EOD, truncated [ 2170.949148][T31006] loop2: p233 start 1854537728 is beyond EOD, truncated [ 2170.963190][T31006] loop2: p234 start 1854537728 is beyond EOD, truncated [ 2170.984067][T31006] loop2: p235 start 1854537728 is beyond EOD, truncated [ 2170.997905][T31006] loop2: p236 start 1854537728 is beyond EOD, truncated [ 2171.011870][T31006] loop2: p237 start 1854537728 is beyond EOD, truncated [ 2171.011882][T31006] loop2: p238 start 1854537728 is beyond EOD, truncated [ 2171.011897][T31006] loop2: p239 start 1854537728 is beyond EOD, truncated [ 2171.025769][T31006] loop2: p240 start 1854537728 is beyond EOD, truncated [ 2171.025781][T31006] loop2: p241 start 1854537728 is beyond EOD, truncated [ 2171.025792][T31006] loop2: p242 start 1854537728 is beyond EOD, truncated [ 2171.040106][T31006] loop2: p243 start 1854537728 is beyond EOD, truncated [ 2171.054904][T31006] loop2: p244 start 1854537728 is beyond EOD, truncated [ 2171.068419][T31006] loop2: p245 start 1854537728 is beyond EOD, truncated [ 2171.082263][T31006] loop2: p246 start 1854537728 is beyond EOD, truncated [ 2171.096215][T31006] loop2: p247 start 1854537728 is beyond EOD, truncated [ 2171.110217][T31006] loop2: p248 start 1854537728 is beyond EOD, truncated [ 2171.124199][T31006] loop2: p249 start 1854537728 is beyond EOD, truncated [ 2171.131458][T31006] loop2: p250 start 1854537728 is beyond EOD, truncated [ 2171.138582][T31006] loop2: p251 start 1854537728 is beyond EOD, truncated [ 2171.138593][T31006] loop2: p252 start 1854537728 is beyond EOD, truncated [ 2171.138605][T31006] loop2: p253 start 1854537728 is beyond EOD, truncated [ 2171.138616][T31006] loop2: p254 start 1854537728 is beyond EOD, truncated [ 2171.138628][T31006] loop2: p255 start 1854537728 is beyond EOD, truncated 18:13:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:13:59 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x400, 0x2000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:13:59 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04c7f94000000000"], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bind$alg(r1, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x88000) write$P9_RXATTRCREATE(r2, &(0x7f00000000c0)={0x7, 0x21, 0x2}, 0x7) 18:13:59 executing program 2: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x4000) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="02006800000f000000000000000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700740000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) 18:13:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) [ 2171.317628][T31056] binder: 31053:31056 unknown command 1090111236 [ 2171.344909][T31056] binder: 31053:31056 ioctl c0306201 20000040 returned -22 [ 2171.563075][T31070] loop2: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 [ 2171.563088][T31070] loop2: partition table partially beyond EOD, [ 2171.683817][T31070] truncated [ 2171.687609][T31070] loop2: p1 size 2 extends beyond EOD, truncated [ 2171.696476][T31070] loop2: p4 start 1854537728 is beyond EOD, truncated [ 2171.703916][T31070] loop2: p5 start 1854537728 is beyond EOD, truncated [ 2171.711378][T31070] loop2: p6 start 1854537728 is beyond EOD, truncated [ 2171.718801][T31070] loop2: p7 start 1854537728 is beyond EOD, truncated [ 2171.725931][T31070] loop2: p8 start 1854537728 is beyond EOD, truncated [ 2171.733356][T31070] loop2: p9 start 1854537728 is beyond EOD, truncated [ 2171.740505][T31070] loop2: p10 start 1854537728 is beyond EOD, truncated [ 2171.747862][T31070] loop2: p11 start 1854537728 is beyond EOD, truncated [ 2171.756064][T31070] loop2: p12 start 1854537728 is beyond EOD, truncated [ 2171.763632][T31070] loop2: p13 start 1854537728 is beyond EOD, truncated [ 2171.771008][T31070] loop2: p14 start 1854537728 is beyond EOD, truncated [ 2171.778650][T31070] loop2: p15 start 1854537728 is beyond EOD, truncated [ 2171.785888][T31070] loop2: p16 start 1854537728 is beyond EOD, truncated [ 2171.793612][T31070] loop2: p17 start 1854537728 is beyond EOD, truncated [ 2171.801009][T31070] loop2: p18 start 1854537728 is beyond EOD, truncated [ 2171.808327][T31070] loop2: p19 start 1854537728 is beyond EOD, truncated [ 2171.815913][T31070] loop2: p20 start 1854537728 is beyond EOD, truncated [ 2171.823266][T31070] loop2: p21 start 1854537728 is beyond EOD, truncated [ 2171.830805][T31070] loop2: p22 start 1854537728 is beyond EOD, truncated [ 2171.837995][T31070] loop2: p23 start 1854537728 is beyond EOD, truncated [ 2171.845830][T31070] loop2: p24 start 1854537728 is beyond EOD, truncated [ 2171.853315][T31070] loop2: p25 start 1854537728 is beyond EOD, truncated [ 2171.853327][T31070] loop2: p26 start 1854537728 is beyond EOD, truncated [ 2171.853337][T31070] loop2: p27 start 1854537728 is beyond EOD, truncated [ 2171.853355][T31070] loop2: p28 start 1854537728 is beyond EOD, truncated [ 2171.868397][T31070] loop2: p29 start 1854537728 is beyond EOD, truncated [ 2171.881560][T31070] loop2: p30 start 1854537728 is beyond EOD, truncated [ 2171.895242][T31070] loop2: p31 start 1854537728 is beyond EOD, truncated [ 2171.902847][T31070] loop2: p32 start 1854537728 is beyond EOD, truncated [ 2171.910211][T31070] loop2: p33 start 1854537728 is beyond EOD, truncated [ 2171.917794][T31070] loop2: p34 start 1854537728 is beyond EOD, truncated [ 2171.925255][T31070] loop2: p35 start 1854537728 is beyond EOD, truncated [ 2171.932883][T31070] loop2: p36 start 1854537728 is beyond EOD, truncated [ 2171.940266][T31070] loop2: p37 start 1854537728 is beyond EOD, truncated [ 2171.947880][T31070] loop2: p38 start 1854537728 is beyond EOD, truncated [ 2171.955281][T31070] loop2: p39 start 1854537728 is beyond EOD, truncated [ 2171.963153][T31070] loop2: p40 start 1854537728 is beyond EOD, truncated [ 2171.970588][T31070] loop2: p41 start 1854537728 is beyond EOD, truncated [ 2171.977870][T31070] loop2: p42 start 1854537728 is beyond EOD, truncated [ 2171.986468][T31070] loop2: p43 start 1854537728 is beyond EOD, truncated [ 2171.993819][T31070] loop2: p44 start 1854537728 is beyond EOD, truncated [ 2172.001520][T31070] loop2: p45 start 1854537728 is beyond EOD, truncated [ 2172.008915][T31070] loop2: p46 start 1854537728 is beyond EOD, truncated [ 2172.016523][T31070] loop2: p47 start 1854537728 is beyond EOD, truncated [ 2172.023855][T31070] loop2: p48 start 1854537728 is beyond EOD, truncated [ 2172.031599][T31070] loop2: p49 start 1854537728 is beyond EOD, truncated [ 2172.038957][T31070] loop2: p50 start 1854537728 is beyond EOD, truncated [ 2172.046520][T31070] loop2: p51 start 1854537728 is beyond EOD, truncated [ 2172.054855][T31070] loop2: p52 start 1854537728 is beyond EOD, truncated [ 2172.062744][T31070] loop2: p53 start 1854537728 is beyond EOD, truncated [ 2172.070122][T31070] loop2: p54 start 1854537728 is beyond EOD, truncated [ 2172.078736][T31070] loop2: p55 start 1854537728 is beyond EOD, truncated [ 2172.086283][T31070] loop2: p56 start 1854537728 is beyond EOD, truncated [ 2172.093577][T31070] loop2: p57 start 1854537728 is beyond EOD, truncated [ 2172.101179][T31070] loop2: p58 start 1854537728 is beyond EOD, truncated [ 2172.103318][T31049] chnl_net:caif_netlink_parms(): no params data found [ 2172.109244][T31070] loop2: p59 start 1854537728 is beyond EOD, truncated [ 2172.122545][T31070] loop2: p60 start 1854537728 is beyond EOD, truncated [ 2172.131322][T31070] loop2: p61 start 1854537728 is beyond EOD, truncated [ 2172.146086][T31070] loop2: p62 start 1854537728 is beyond EOD, truncated [ 2172.163835][T31070] loop2: p63 start 1854537728 is beyond EOD, truncated [ 2172.170979][T31070] loop2: p64 start 1854537728 is beyond EOD, truncated [ 2172.178005][T31070] loop2: p65 start 1854537728 is beyond EOD, truncated [ 2172.185172][T31070] loop2: p66 start 1854537728 is beyond EOD, truncated [ 2172.195832][T31070] loop2: p67 start 1854537728 is beyond EOD, truncated [ 2172.204309][T31070] loop2: p68 start 1854537728 is beyond EOD, truncated [ 2172.212935][T31070] loop2: p69 start 1854537728 is beyond EOD, truncated [ 2172.220787][T31070] loop2: p70 start 1854537728 is beyond EOD, truncated [ 2172.229292][T31070] loop2: p71 start 1854537728 is beyond EOD, truncated [ 2172.236566][T31070] loop2: p72 start 1854537728 is beyond EOD, truncated [ 2172.244743][T31070] loop2: p73 start 1854537728 is beyond EOD, truncated [ 2172.265470][T31070] loop2: p74 start 1854537728 is beyond EOD, truncated [ 2172.298798][T31070] loop2: p75 start 1854537728 is beyond EOD, truncated [ 2172.305730][T31070] loop2: p76 start 1854537728 is beyond EOD, truncated [ 2172.322598][T31070] loop2: p77 start 1854537728 is beyond EOD, truncated [ 2172.329794][T31070] loop2: p78 start 1854537728 is beyond EOD, truncated [ 2172.336728][T31070] loop2: p79 start 1854537728 is beyond EOD, truncated [ 2172.343829][T31070] loop2: p80 start 1854537728 is beyond EOD, truncated [ 2172.351003][T31070] loop2: p81 start 1854537728 is beyond EOD, truncated [ 2172.357982][T31070] loop2: p82 start 1854537728 is beyond EOD, truncated [ 2172.365113][T31070] loop2: p83 start 1854537728 is beyond EOD, truncated [ 2172.373059][T31070] loop2: p84 start 1854537728 is beyond EOD, truncated [ 2172.380225][T31070] loop2: p85 start 1854537728 is beyond EOD, truncated [ 2172.387143][T31070] loop2: p86 start 1854537728 is beyond EOD, truncated [ 2172.394252][T31070] loop2: p87 start 1854537728 is beyond EOD, truncated [ 2172.401376][T31070] loop2: p88 start 1854537728 is beyond EOD, truncated [ 2172.408582][T31070] loop2: p89 start 1854537728 is beyond EOD, truncated [ 2172.415437][T31070] loop2: p90 start 1854537728 is beyond EOD, truncated [ 2172.422528][T31070] loop2: p91 start 1854537728 is beyond EOD, truncated [ 2172.429679][T31070] loop2: p92 start 1854537728 is beyond EOD, truncated [ 2172.436607][T31070] loop2: p93 start 1854537728 is beyond EOD, truncated [ 2172.443680][T31070] loop2: p94 start 1854537728 is beyond EOD, truncated [ 2172.450771][T31070] loop2: p95 start 1854537728 is beyond EOD, truncated [ 2172.457696][T31070] loop2: p96 start 1854537728 is beyond EOD, truncated [ 2172.464766][T31070] loop2: p97 start 1854537728 is beyond EOD, truncated [ 2172.471918][T31070] loop2: p98 start 1854537728 is beyond EOD, truncated [ 2172.479025][T31070] loop2: p99 start 1854537728 is beyond EOD, truncated [ 2172.485938][T31070] loop2: p100 start 1854537728 is beyond EOD, truncated [ 2172.493182][T31070] loop2: p101 start 1854537728 is beyond EOD, truncated [ 2172.501180][T31070] loop2: p102 start 1854537728 is beyond EOD, truncated [ 2172.509237][T31070] loop2: p103 start 1854537728 is beyond EOD, truncated [ 2172.516239][T31070] loop2: p104 start 1854537728 is beyond EOD, truncated [ 2172.523493][T31070] loop2: p105 start 1854537728 is beyond EOD, truncated [ 2172.530676][T31070] loop2: p106 start 1854537728 is beyond EOD, truncated [ 2172.537681][T31070] loop2: p107 start 1854537728 is beyond EOD, truncated [ 2172.544938][T31070] loop2: p108 start 1854537728 is beyond EOD, truncated [ 2172.552106][T31070] loop2: p109 start 1854537728 is beyond EOD, truncated [ 2172.559348][T31070] loop2: p110 start 1854537728 is beyond EOD, truncated [ 2172.566440][T31070] loop2: p111 start 1854537728 is beyond EOD, truncated [ 2172.575897][T31070] loop2: p112 start 1854537728 is beyond EOD, truncated [ 2172.582903][T31070] loop2: p113 start 1854537728 is beyond EOD, truncated [ 2172.582916][T31070] loop2: p114 start 1854537728 is beyond EOD, truncated [ 2172.582927][T31070] loop2: p115 start 1854537728 is beyond EOD, truncated [ 2172.582937][T31070] loop2: p116 start 1854537728 is beyond EOD, truncated [ 2172.582947][T31070] loop2: p117 start 1854537728 is beyond EOD, truncated [ 2172.582958][T31070] loop2: p118 start 1854537728 is beyond EOD, truncated [ 2172.582969][T31070] loop2: p119 start 1854537728 is beyond EOD, truncated [ 2172.582980][T31070] loop2: p120 start 1854537728 is beyond EOD, truncated [ 2172.582991][T31070] loop2: p121 start 1854537728 is beyond EOD, truncated [ 2172.583002][T31070] loop2: p122 start 1854537728 is beyond EOD, truncated [ 2172.583013][T31070] loop2: p123 start 1854537728 is beyond EOD, truncated [ 2172.583023][T31070] loop2: p124 start 1854537728 is beyond EOD, truncated [ 2172.597046][T31070] loop2: p125 start 1854537728 is beyond EOD, truncated [ 2172.617394][T31070] loop2: p126 start 1854537728 is beyond EOD, truncated [ 2172.624991][T31070] loop2: p127 start 1854537728 is beyond EOD, truncated [ 2172.645828][T31070] loop2: p128 start 1854537728 is beyond EOD, truncated [ 2172.653003][T31070] loop2: p129 start 1854537728 is beyond EOD, truncated [ 2172.668239][T31070] loop2: p130 start 1854537728 is beyond EOD, truncated [ 2172.686181][T31070] loop2: p131 start 1854537728 is beyond EOD, truncated [ 2172.694814][T31070] loop2: p132 start 1854537728 is beyond EOD, truncated [ 2172.715271][T31070] loop2: p133 start 1854537728 is beyond EOD, truncated [ 2172.722708][T31070] loop2: p134 start 1854537728 is beyond EOD, truncated [ 2172.736773][T31070] loop2: p135 start 1854537728 is beyond EOD, truncated [ 2172.749164][ T5053] device bridge_slave_1 left promiscuous mode [ 2172.753413][T31070] loop2: p136 start 1854537728 is beyond EOD, truncated [ 2172.755347][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2172.763047][T31070] loop2: p137 start 1854537728 is beyond EOD, truncated [ 2172.778792][T31070] loop2: p138 start 1854537728 is beyond EOD, truncated [ 2172.785765][T31070] loop2: p139 start 1854537728 is beyond EOD, truncated [ 2172.792935][T31070] loop2: p140 start 1854537728 is beyond EOD, truncated [ 2172.800203][T31070] loop2: p141 start 1854537728 is beyond EOD, truncated [ 2172.807139][T31070] loop2: p142 start 1854537728 is beyond EOD, truncated [ 2172.814468][T31070] loop2: p143 start 1854537728 is beyond EOD, truncated [ 2172.821524][T31070] loop2: p144 start 1854537728 is beyond EOD, truncated [ 2172.828531][T31070] loop2: p145 start 1854537728 is beyond EOD, truncated [ 2172.828544][T31070] loop2: p146 start 1854537728 is beyond EOD, truncated [ 2172.828555][T31070] loop2: p147 start 1854537728 is beyond EOD, truncated [ 2172.828591][T31070] loop2: p148 start 1854537728 is beyond EOD, truncated [ 2172.828623][T31070] loop2: p149 start 1854537728 is beyond EOD, truncated [ 2172.842567][T31070] loop2: p150 start 1854537728 is beyond EOD, truncated [ 2172.850694][ T5053] device bridge_slave_0 left promiscuous mode [ 2172.862503][T31070] loop2: p151 start 1854537728 is beyond EOD, truncated [ 2172.864024][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2172.876789][T31070] loop2: p152 start 1854537728 is beyond EOD, truncated [ 2172.897739][T31070] loop2: p153 start 1854537728 is beyond EOD, truncated [ 2172.904725][T31070] loop2: p154 start 1854537728 is beyond EOD, truncated [ 2172.911696][T31070] loop2: p155 start 1854537728 is beyond EOD, [ 2172.911705][T31070] truncated [ 2172.911720][T31070] loop2: p156 start 1854537728 is beyond EOD, truncated [ 2172.911729][T31070] loop2: p157 start 1854537728 is beyond EOD, truncated [ 2172.911740][T31070] loop2: p158 start 1854537728 is beyond EOD, truncated [ 2172.921240][T31070] loop2: p159 start 1854537728 is beyond EOD, truncated [ 2172.949057][T31070] loop2: p160 start 1854537728 is beyond EOD, truncated [ 2172.955994][T31070] loop2: p161 start 1854537728 is beyond EOD, truncated [ 2172.963005][T31070] loop2: p162 start 1854537728 is beyond EOD, truncated [ 2172.970133][T31070] loop2: p163 start 1854537728 is beyond EOD, truncated [ 2172.977075][T31070] loop2: p164 start 1854537728 is beyond EOD, truncated [ 2172.984060][T31070] loop2: p165 start 1854537728 is beyond EOD, truncated [ 2172.991045][T31070] loop2: p166 start 1854537728 is beyond EOD, truncated [ 2172.997986][T31070] loop2: p167 start 1854537728 is beyond EOD, truncated [ 2173.004986][T31070] loop2: p168 start 1854537728 is beyond EOD, truncated [ 2173.011983][T31070] loop2: p169 start 1854537728 is beyond EOD, truncated [ 2173.018993][T31070] loop2: p170 start 1854537728 is beyond EOD, truncated [ 2173.025934][T31070] loop2: p171 start 1854537728 is beyond EOD, truncated [ 2173.032989][T31070] loop2: p172 start 1854537728 is beyond EOD, truncated [ 2173.039995][T31070] loop2: p173 start 1854537728 is beyond EOD, truncated [ 2173.040009][T31070] loop2: p174 start 1854537728 is beyond EOD, truncated [ 2173.040020][T31070] loop2: p175 start 1854537728 is beyond EOD, truncated [ 2173.040032][T31070] loop2: p176 start 1854537728 is beyond EOD, truncated [ 2173.040043][T31070] loop2: p177 start 1854537728 is beyond EOD, truncated [ 2173.040061][T31070] loop2: p178 start 1854537728 is beyond EOD, truncated [ 2173.054408][T31070] loop2: p179 start 1854537728 is beyond EOD, truncated [ 2173.075798][T31070] loop2: p180 start 1854537728 is beyond EOD, truncated [ 2173.095108][T31070] loop2: p181 start 1854537728 is beyond EOD, truncated [ 2173.103368][T31070] loop2: p182 start 1854537728 is beyond EOD, truncated [ 2173.110580][T31070] loop2: p183 start 1854537728 is beyond EOD, truncated [ 2173.117705][T31070] loop2: p184 start 1854537728 is beyond EOD, truncated [ 2173.124747][T31070] loop2: p185 start 1854537728 is beyond EOD, truncated [ 2173.131921][T31070] loop2: p186 start 1854537728 is beyond EOD, truncated [ 2173.138924][T31070] loop2: p187 start 1854537728 is beyond EOD, truncated [ 2173.145858][T31070] loop2: p188 start 1854537728 is beyond EOD, truncated [ 2173.152863][T31070] loop2: p189 start 1854537728 is beyond EOD, truncated [ 2173.159861][T31070] loop2: p190 start 1854537728 is beyond EOD, truncated [ 2173.166812][T31070] loop2: p191 start 1854537728 is beyond EOD, truncated [ 2173.174226][T31070] loop2: p192 start 1854537728 is beyond EOD, truncated [ 2173.181691][T31070] loop2: p193 start 1854537728 is beyond EOD, truncated [ 2173.188692][T31070] loop2: p194 start 1854537728 is beyond EOD, truncated [ 2173.195880][T31070] loop2: p195 start 1854537728 is beyond EOD, truncated [ 2173.202889][T31070] loop2: p196 start 1854537728 is beyond EOD, truncated [ 2173.210398][T31070] loop2: p197 start 1854537728 is beyond EOD, truncated [ 2173.217349][T31070] loop2: p198 start 1854537728 is beyond EOD, truncated [ 2173.224365][T31070] loop2: p199 start 1854537728 is beyond EOD, truncated [ 2173.231339][T31070] loop2: p200 start 1854537728 is beyond EOD, truncated [ 2173.238334][T31070] loop2: p201 start 1854537728 is beyond EOD, truncated [ 2173.245270][T31070] loop2: p202 start 1854537728 is beyond EOD, truncated [ 2173.252291][T31070] loop2: p203 start 1854537728 is beyond EOD, truncated [ 2173.259261][T31070] loop2: p204 start 1854537728 is beyond EOD, truncated [ 2173.266196][T31070] loop2: p205 start 1854537728 is beyond EOD, truncated [ 2173.273198][T31070] loop2: p206 start 1854537728 is beyond EOD, truncated [ 2173.280222][T31070] loop2: p207 start 1854537728 is beyond EOD, truncated [ 2173.287187][T31070] loop2: p208 start 1854537728 is beyond EOD, truncated [ 2173.294215][T31070] loop2: p209 start 1854537728 is beyond EOD, truncated [ 2173.301189][T31070] loop2: p210 start 1854537728 is beyond EOD, truncated [ 2173.308129][T31070] loop2: p211 start 1854537728 is beyond EOD, truncated [ 2173.315174][T31070] loop2: p212 start 1854537728 is beyond EOD, truncated [ 2173.322158][T31070] loop2: p213 start 1854537728 is beyond EOD, truncated [ 2173.329190][T31070] loop2: p214 start 1854537728 is beyond EOD, truncated [ 2173.336134][T31070] loop2: p215 start 1854537728 is beyond EOD, truncated [ 2173.343132][T31070] loop2: p216 start 1854537728 is beyond EOD, truncated [ 2173.350154][T31070] loop2: p217 start 1854537728 is beyond EOD, truncated [ 2173.357149][T31070] loop2: p218 start 1854537728 is beyond EOD, truncated [ 2173.364190][T31070] loop2: p219 start 1854537728 is beyond EOD, truncated [ 2173.371257][T31070] loop2: p220 start 1854537728 is beyond EOD, truncated [ 2173.378290][T31070] loop2: p221 start 1854537728 is beyond EOD, truncated [ 2173.385261][T31070] loop2: p222 start 1854537728 is beyond EOD, truncated [ 2173.392277][T31070] loop2: p223 start 1854537728 is beyond EOD, truncated [ 2173.402542][T31070] loop2: p224 start 1854537728 is beyond EOD, truncated [ 2173.412316][T31070] loop2: p225 start 1854537728 is beyond EOD, truncated [ 2173.423227][T31070] loop2: p226 start 1854537728 is beyond EOD, truncated [ 2173.433048][T31070] loop2: p227 start 1854537728 is beyond EOD, truncated [ 2173.443829][T31070] loop2: p228 start 1854537728 is beyond EOD, truncated [ 2173.455889][T31070] loop2: p229 start 1854537728 is beyond EOD, truncated [ 2173.466598][T31070] loop2: p230 start 1854537728 is beyond EOD, truncated [ 2173.476663][T31070] loop2: p231 start 1854537728 is beyond EOD, truncated [ 2173.487356][T31070] loop2: p232 start 1854537728 is beyond EOD, truncated [ 2173.497236][T31070] loop2: p233 start 1854537728 is beyond EOD, truncated [ 2173.507967][T31070] loop2: p234 start 1854537728 is beyond EOD, truncated [ 2173.517882][T31070] loop2: p235 start 1854537728 is beyond EOD, truncated [ 2173.532257][T31070] loop2: p236 start 1854537728 is beyond EOD, truncated [ 2173.542099][T31070] loop2: p237 start 1854537728 is beyond EOD, truncated [ 2173.553004][T31070] loop2: p238 start 1854537728 is beyond EOD, truncated [ 2173.562982][T31070] loop2: p239 start 1854537728 is beyond EOD, truncated [ 2173.573868][T31070] loop2: p240 start 1854537728 is beyond EOD, truncated [ 2173.583600][T31070] loop2: p241 start 1854537728 is beyond EOD, truncated [ 2173.594305][T31070] loop2: p242 start 1854537728 is beyond EOD, truncated [ 2173.604226][T31070] loop2: p243 start 1854537728 is beyond EOD, truncated [ 2173.615386][T31070] loop2: p244 start 1854537728 is beyond EOD, truncated [ 2173.625470][T31070] loop2: p245 start 1854537728 is beyond EOD, truncated [ 2173.636570][T31070] loop2: p246 start 1854537728 is beyond EOD, truncated [ 2173.646438][T31070] loop2: p247 start 1854537728 is beyond EOD, truncated [ 2173.657045][T31070] loop2: p248 start 1854537728 is beyond EOD, truncated [ 2173.667452][T31070] loop2: p249 start 1854537728 is beyond EOD, truncated [ 2173.675263][T31070] loop2: p250 start 1854537728 is beyond EOD, truncated [ 2173.691515][T31070] loop2: p251 start 1854537728 is beyond EOD, truncated [ 2173.703936][T31070] loop2: p252 start 1854537728 is beyond EOD, truncated [ 2173.714516][T31070] loop2: p253 start 1854537728 is beyond EOD, truncated [ 2173.726911][T31070] loop2: p254 start 1854537728 is beyond EOD, truncated [ 2173.736563][T31070] loop2: p255 start 1854537728 is beyond EOD, truncated [ 2175.231219][ T5053] device hsr_slave_1 left promiscuous mode [ 2175.271244][ T5053] device hsr_slave_0 left promiscuous mode [ 2175.312028][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2175.325415][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2175.336542][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2175.375935][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2175.449243][ T5053] bond0 (unregistering): Released all slaves [ 2175.615619][T31049] bridge0: port 1(bridge_slave_0) entered blocking state [ 2175.622820][T31049] bridge0: port 1(bridge_slave_0) entered disabled state [ 2175.630577][T31049] device bridge_slave_0 entered promiscuous mode [ 2175.638247][T31049] bridge0: port 2(bridge_slave_1) entered blocking state [ 2175.645370][T31049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2175.653119][T31049] device bridge_slave_1 entered promiscuous mode [ 2175.673596][T31049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2175.684602][T31049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2175.705626][T31049] team0: Port device team_slave_0 added [ 2175.713044][T31049] team0: Port device team_slave_1 added [ 2175.771391][T31049] device hsr_slave_0 entered promiscuous mode [ 2175.818680][T31049] device hsr_slave_1 entered promiscuous mode [ 2175.909838][T31049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2175.923637][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2175.934339][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2175.943352][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2175.955783][T31049] 8021q: adding VLAN 0 to HW filter on device team0 [ 2176.002455][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2176.011408][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2176.019933][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 2176.027017][T14495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2176.035255][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2176.053840][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2176.063483][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2176.076158][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2176.084000][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2176.108894][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2176.133031][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2176.142161][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2176.151312][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2176.164897][T31049] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2176.177300][T31049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2176.187810][T14497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2176.230220][T31049] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:04 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x40000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:04 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x40) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8, 0x442000) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000100)=@generic={0xb8ded9fc444d65cc, 0x20, 0x4}) 18:14:04 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:04 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="eb62000000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:14:04 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x8000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) [ 2176.612801][T31095] binder: 31091:31095 unknown command 25323 [ 2176.618950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2176.619000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2176.651512][T31095] binder: 31091:31095 ioctl c0306201 20000040 returned -22 [ 2176.724841][T31101] binder: 31091:31101 unknown command 25323 18:14:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x3, 0x800000000000, 0x8}, 0x0, 0x7ff, 0x5b}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0xfff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x8, 0x8}, &(0x7f0000000200)=0xc) 18:14:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2176.794367][T31101] binder: 31091:31101 ioctl c0306201 20000040 returned -22 18:14:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xc, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7a902e300800213c00020000"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7fff, 0x2000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0x28, &(0x7f0000000280)}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)=@ipv4_getrule={0x20, 0x22, 0x120, 0x70bd25, 0x25dfdbfb, {0x2, 0x34, 0x90, 0x3, 0x3, 0x0, 0x0, 0x5, 0x10015}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18:14:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:05 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x480000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r2, 0x700, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x12}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0xd}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffff001}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x1e}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x294f}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@rand_addr="21cbeb5b4afc9d654cb335d5aa2c1da5"}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x796}]}, 0xc8}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) [ 2177.100267][T31115] binder: 31113:31115 unknown command 808358010 18:14:05 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) mq_open(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x800, 0x100, &(0x7f0000000100)={0x5, 0x7, 0x9, 0x8, 0x3, 0x1, 0x7f, 0x5}) r1 = socket$key(0xf, 0x3, 0x2) accept4(r1, &(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, &(0x7f00000001c0)=0x80, 0x0) [ 2177.150811][T31115] binder: 31113:31115 ioctl c0306201 20000240 returned -22 [ 2177.200123][T31119] binder: 31113:31119 unknown command 808358010 [ 2177.228816][T31119] binder: 31113:31119 ioctl c0306201 20000240 returned -22 18:14:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x8cffffff, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') set_mempolicy(0x3, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0xa13, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r5, r7, 0x0, 0x80002d000000) sendfile(r1, r0, 0x0, 0x80000000) 18:14:06 executing program 5: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x4, 0x165180) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000100), 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:06 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) r1 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000004280)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004140)=[{{&(0x7f0000000080)=@x25={0x9, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/52, 0x34}], 0x1, &(0x7f0000000280)=""/88, 0x58}, 0x100000000}, {{&(0x7f0000000300)=@ethernet, 0x80, &(0x7f0000000840)=[{&(0x7f0000000380)=""/100, 0x64}, {&(0x7f0000000400)=""/140, 0x8c}, {&(0x7f00000004c0)=""/102, 0x66}, {&(0x7f0000000540)=""/140, 0x8c}, {&(0x7f0000000600)=""/175, 0xaf}, {&(0x7f00000006c0)=""/96, 0x60}, {&(0x7f0000000740)=""/98, 0x62}, {&(0x7f00000007c0)=""/124, 0x7c}], 0x8, &(0x7f00000008c0)=""/140, 0x8c}, 0x7}, {{&(0x7f0000000980)=@un=@abs, 0x80, &(0x7f0000000200)=[{&(0x7f0000000a00)=""/165, 0xa5}, {&(0x7f0000000ac0)=""/124, 0x7c}, {&(0x7f0000000b40)=""/89, 0x59}], 0x3, &(0x7f0000000bc0)=""/113, 0x71}, 0x8}, {{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=""/181, 0xb5}, {&(0x7f0000000d00)=""/136, 0x88}, {&(0x7f0000000dc0)=""/104, 0x68}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/178, 0xb2}], 0x5, &(0x7f0000001f80)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002f80)=@ethernet, 0x80, &(0x7f0000003100)=[{&(0x7f0000003000)=""/241, 0xf1}], 0x1, &(0x7f0000003140)=""/4096, 0x1000}, 0x1}], 0x5, 0x10000, &(0x7f00000042c0)={r2, r3+30000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:14:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xc0ed0000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:06 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x10000000fff7, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0, r0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:06 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') set_mempolicy(0x3, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0xa13, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r5, r7, 0x0, 0x80002d000000) sendfile(r1, r0, 0x0, 0x80000000) 18:14:07 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x80, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00a3ab9e372169cc5b23bcf78ff1df03c8086a"], 0x0, 0x0, 0x0}) r1 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0x0, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x1, 0x4) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x8d5, 0x4) 18:14:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x10000) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740)='/dev/hwrng\x00', 0x100, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000180)=0x6, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x8800, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000600)={'broute\x00', 0x0, 0x4, 0xf6, [], 0x7, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)=""/246}, &(0x7f0000000140)=0x78) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="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"], @ANYBLOB='\x00'/88], 0xc8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000100)={0x1, 0x150b3086, 0x1000, 0x5}) 18:14:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:07 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x0, &(0x7f00000001c0)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x400000000001, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') set_mempolicy(0x3, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0xa13, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r7, 0x200004) sendfile(r5, r7, 0x0, 0x80002d000000) sendfile(r1, r0, 0x0, 0x80000000) 18:14:07 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x206001) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) [ 2179.159969][T31179] binder: 31178:31179 unknown command 0 [ 2179.175325][T31179] binder: 31178:31179 ioctl c0306201 20000040 returned -22 [ 2179.198129][T31179] binder: 31178:31179 unknown command -1632918784 [ 2179.214007][T31179] binder: 31178:31179 ioctl c0306201 20000240 returned -22 [ 2179.255492][T31181] binder: 31178:31181 unknown command 0 [ 2179.288508][T31181] binder: 31178:31181 ioctl c0306201 20000040 returned -22 [ 2179.321876][T31179] binder: 31178:31179 unknown command -1632918784 [ 2179.348721][T31179] binder: 31178:31179 ioctl c0306201 20000240 returned -22 [ 2180.031843][T31192] IPVS: ftp: loaded support on port[0] = 21 [ 2180.257387][T31192] chnl_net:caif_netlink_parms(): no params data found [ 2180.355063][T31192] bridge0: port 1(bridge_slave_0) entered blocking state [ 2180.362393][T31192] bridge0: port 1(bridge_slave_0) entered disabled state [ 2180.370228][T31192] device bridge_slave_0 entered promiscuous mode [ 2180.378521][T31192] bridge0: port 2(bridge_slave_1) entered blocking state [ 2180.385747][T31192] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.394150][T31192] device bridge_slave_1 entered promiscuous mode [ 2180.482466][T31192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2180.493366][T31192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2180.514920][T31192] team0: Port device team_slave_0 added [ 2180.522008][T31192] team0: Port device team_slave_1 added [ 2180.530145][ T5053] device bridge_slave_1 left promiscuous mode [ 2180.536463][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2180.589102][ T5053] device bridge_slave_0 left promiscuous mode [ 2180.595362][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2182.371194][ T5053] device hsr_slave_1 left promiscuous mode [ 2182.414073][ T5053] device hsr_slave_0 left promiscuous mode [ 2182.482572][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2182.495637][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2182.509228][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2182.553351][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2182.642685][ T5053] bond0 (unregistering): Released all slaves [ 2182.820947][T31192] device hsr_slave_0 entered promiscuous mode [ 2182.888398][T31192] device hsr_slave_1 entered promiscuous mode [ 2182.972511][T31192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2182.991824][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2183.000128][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2183.010778][T31192] 8021q: adding VLAN 0 to HW filter on device team0 [ 2183.020835][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2183.029700][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2183.038248][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2183.045297][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2183.053987][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2183.144211][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2183.153120][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2183.161768][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2183.168871][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2183.176578][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2183.185586][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2183.195082][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2183.204152][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2183.213087][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2183.222138][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2183.232994][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2183.241231][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2183.249899][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2183.267869][T31192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2183.288589][T31192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2183.296466][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2183.312343][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2183.348060][T31192] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xf6ffffff, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:12 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x800000000000000) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000180)={0x7, 0x0, 0xffff, 0x2, '\x00', 0x400}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0463044000000000d8530c569c0635d7716d"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06630440000000006be77dd84aa35eecfa7b2cde41c9693868bed8853eed8ccad5747e070851fbba545716b73b455d19147166d4ff40b02c8b0166ca031440e0ea22de72cf129a69bbaf8a5823d54192c9ed42cb4c41a5f30ca6f73bd8fc8e5f6f0fa44c930d12284f4343e92959c59c4fd2d500b85bddbc5183d6bca8454b865b9adb237eb748fbb4f0ef7b9ca0c319cdd59e10c19fdcc4ccd4bd4b6c1ca553"], 0x0, 0x0, 0x0}) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x200) 18:14:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000300)={0x2, 0x8000}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x80000, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r3, 0xf02, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0x4018620d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18:14:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xffd, 0x6000) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000100)=0x6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) prctl$PR_SVE_SET_VL(0x32, 0x2f393) 18:14:12 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:12 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:14:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x40) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'eql\x00', {0x2, 0x4e24, @loopback}}) 18:14:12 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffffffffffdb2, 0x0, &(0x7f00000003c0), 0xffffffffffffff1c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:14:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x480a00) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) [ 2184.243764][T31233] binder: 31232:31233 ioctl c0306201 20000040 returned -14 18:14:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xf9fdffff, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:13 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x28000, 0x0) getsockname$netlink(r6, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 18:14:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf, &(0x7f00000000c0)='/dev/snd/timer\x00'}, 0x30) r2 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0xd776, 0x77decba57437447a) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x4}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0xffda, 0x4, 0x9, 0x374e, 0x7, 0xcf, 0x9, 0x9, r3}, &(0x7f0000000300)=0x20) fcntl$setown(r0, 0x8, r1) 18:14:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000002c0)=0x4, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a000400000007000a000200000800005d14a4e91ee438", 0x39}], 0x1) sendfile(r1, r0, 0x0, 0x80000000) 18:14:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x1, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xfffffffffffffff8}) 18:14:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:13 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000002c0)=0x4, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a000400000007000a000200000800005d14a4e91ee438", 0x39}], 0x1) sendfile(r1, r0, 0x0, 0x80000000) 18:14:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfeffffff, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") unshare(0x8000000) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f00000000c0)={0x24f0b1d2, 0xc962, 0x7, 0x8, 0x3, 0x5ca}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:14 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x28000, 0x0) getsockname$netlink(r6, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 18:14:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f00000002c0)=0x4, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000040)=0xe8) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x8955, &(0x7f0000000000)=0x2) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300090468fe0700000000000700ff3f03000000450001070000001419001a000400000007000a000200000800005d14a4e91ee438", 0x39}], 0x1) sendfile(r1, r0, 0x0, 0x80000000) 18:14:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:14 executing program 5: syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:14 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4d93, 0x3, 0x1, 0x8, 0x7, 0x401, 0x80000000, {0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0xdf}}, 0x6, 0x7fff, 0xffffffffffffff01, 0x9, 0x1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="090200000000"], 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffff9c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket(0x1, 0x1, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) getrandom(0x0, 0x0, 0xffffeffffdfffffb) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x20}, 0x1c) timer_create(0x3, &(0x7f0000000100)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={0x0, 0x3}, 0x0, &(0x7f0000000180)="c3a5f0", 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:14:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:14 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000000c0)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2) 18:14:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2187.192206][T31316] IPVS: ftp: loaded support on port[0] = 21 [ 2187.399830][T31316] chnl_net:caif_netlink_parms(): no params data found [ 2187.502765][T31316] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.510015][T31316] bridge0: port 1(bridge_slave_0) entered disabled state [ 2187.517597][T31316] device bridge_slave_0 entered promiscuous mode [ 2187.525481][T31316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2187.532662][T31316] bridge0: port 2(bridge_slave_1) entered disabled state [ 2187.540697][T31316] device bridge_slave_1 entered promiscuous mode [ 2187.633848][T31316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2187.645271][T31316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2187.738543][T31316] team0: Port device team_slave_0 added [ 2187.745380][T31316] team0: Port device team_slave_1 added [ 2187.810479][T31316] device hsr_slave_0 entered promiscuous mode [ 2187.848570][T31316] device hsr_slave_1 entered promiscuous mode [ 2187.973515][T31316] bridge0: port 2(bridge_slave_1) entered blocking state [ 2187.980713][T31316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2187.988033][T31316] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.995146][T31316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2188.109372][T31316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2188.124506][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2188.133204][T14805] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.141068][T14805] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.150075][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2188.162961][T31316] 8021q: adding VLAN 0 to HW filter on device team0 [ 2188.171647][ T5053] device bridge_slave_1 left promiscuous mode [ 2188.177837][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2188.229776][ T5053] device bridge_slave_0 left promiscuous mode [ 2188.236063][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.001255][ T5053] device hsr_slave_1 left promiscuous mode [ 2190.043647][ T5053] device hsr_slave_0 left promiscuous mode [ 2190.103213][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2190.114849][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2190.127160][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2190.165735][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2190.233918][ T5053] bond0 (unregistering): Released all slaves [ 2190.340983][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2190.349782][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2190.356830][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2190.364825][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2190.373474][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2190.380586][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2190.396750][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2190.405258][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2190.427721][T31316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2190.439817][T31316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2190.454340][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2190.463299][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2190.472053][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2190.480821][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2190.489349][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2190.497573][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2190.506133][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2190.514391][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2190.523028][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2190.531117][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2190.593316][T31316] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:19 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xff000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:19 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x7, 0x4, 0x4, 0x4}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4d93, 0x3, 0x1, 0x8, 0x7, 0x401, 0x80000000, {0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0xdf}}, 0x6, 0x7fff, 0xffffffffffffff01, 0x9, 0x1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="090200000000"], 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffff9c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket(0x1, 0x1, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) getrandom(0x0, 0x0, 0xffffeffffdfffffb) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x20}, 0x1c) timer_create(0x3, &(0x7f0000000100)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={0x0, 0x3}, 0x0, &(0x7f0000000180)="c3a5f0", 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:14:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:19 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x28000, 0x0) getsockname$netlink(r6, &(0x7f00000000c0), &(0x7f0000000100)=0xc) 18:14:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x400000) flistxattr(r0, &(0x7f0000000140)=""/167, 0xa7) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0xfffffffffffffffc, 0x0, 0x3}, 0x0, 0x8, 0x10000003}) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x4, 0x800) ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x800000) 18:14:19 executing program 4: socket$inet6(0xa, 0x2, 0x0) r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:19 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/arp\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='comm\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x4d93, 0x3, 0x1, 0x8, 0x7, 0x401, 0x80000000, {0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @local}, 0xdf}}, 0x6, 0x7fff, 0xffffffffffffff01, 0x9, 0x1}}, &(0x7f0000000040)=0xb0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYBLOB="090200000000"], 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'ip\x8ei0\x00\x00@\x00', 0xc205}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x8000000001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffff9c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = socket(0x1, 0x1, 0xfffffffffffffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) r8 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) ioctl$LOOP_CTL_ADD(r7, 0x4c80, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) getrandom(0x0, 0x0, 0xffffeffffdfffffb) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x20}, 0x1c) timer_create(0x3, &(0x7f0000000100)={0x0, 0x25, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000140)={0x0, 0x3}, 0x0, &(0x7f0000000180)="c3a5f0", 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000080)="c0dca5055e0bcfec7be070") r9 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x8955, &(0x7f0000000000)=0x2) sendfile(r1, r0, 0x0, 0x80000000) 18:14:19 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfffffdf9, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x10, &(0x7f00000001c0)={&(0x7f0000000100)=""/170, 0xaa}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:20 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:20 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x28000, 0x0) 18:14:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfeffffff, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:20 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x8) r1 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0x40345410, &(0x7f0000000040)={{0x2}}) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x0) 18:14:20 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xffffff7f, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:20 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x101) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:20 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x300, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:21 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r2, 0xfffffbfffff3ffc9, &(0x7f0000000040)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000001c0)={0xfb, 0x5, 0x8001, "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"}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffdffffffc, 0x0, 0xfffffffffffffffe}}) 18:14:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:21 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x8, 0x0, &(0x7f00000001c0)=[@increfs={0x40046306}], 0x0, 0x0, 0x0}) 18:14:21 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:21 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) [ 2194.742652][T31442] IPVS: ftp: loaded support on port[0] = 21 [ 2195.100995][T31442] chnl_net:caif_netlink_parms(): no params data found [ 2195.135572][T31442] bridge0: port 1(bridge_slave_0) entered blocking state [ 2195.142772][T31442] bridge0: port 1(bridge_slave_0) entered disabled state [ 2195.151328][T31442] device bridge_slave_0 entered promiscuous mode [ 2195.301835][T31442] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.309588][T31442] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.317345][T31442] device bridge_slave_1 entered promiscuous mode [ 2195.337408][T31442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2195.500141][T31442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2195.520090][T31442] team0: Port device team_slave_0 added [ 2195.526972][T31442] team0: Port device team_slave_1 added [ 2195.722568][T31442] device hsr_slave_0 entered promiscuous mode [ 2195.778871][T31442] device hsr_slave_1 entered promiscuous mode [ 2195.989579][T31442] bridge0: port 2(bridge_slave_1) entered blocking state [ 2195.996626][T31442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2196.004029][T31442] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.011084][T31442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2196.021133][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.028940][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.221255][T31442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2196.381173][T31442] 8021q: adding VLAN 0 to HW filter on device team0 [ 2196.388398][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2196.395985][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2196.407997][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2196.417019][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2196.426090][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.433190][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2196.444897][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2196.454588][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2196.463404][T14805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2196.470523][T14805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2196.489635][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2196.498625][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2196.507235][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2196.516274][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2196.525233][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2196.538420][ T5053] device bridge_slave_1 left promiscuous mode [ 2196.545015][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.599417][ T5053] device bridge_slave_0 left promiscuous mode [ 2196.605678][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.660146][ T5053] device bridge_slave_1 left promiscuous mode [ 2196.666362][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.719845][ T5053] device bridge_slave_0 left promiscuous mode [ 2196.726095][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.951112][ T5053] device hsr_slave_1 left promiscuous mode [ 2200.003790][ T5053] device hsr_slave_0 left promiscuous mode [ 2200.071408][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2200.084649][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2200.095873][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.142922][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.269221][ T5053] bond0 (unregistering): Released all slaves [ 2200.431809][ T5053] device hsr_slave_1 left promiscuous mode [ 2200.494490][ T5053] device hsr_slave_0 left promiscuous mode [ 2200.554716][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2200.565839][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2200.577245][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2200.635530][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2200.746130][ T5053] bond0 (unregistering): Released all slaves [ 2200.871293][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2200.880959][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2200.894951][T31442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2200.907530][T31442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2200.928912][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2200.937185][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2200.945779][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2200.954171][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2200.962933][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2200.984376][T31442] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xffffff8c, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:29 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:29 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000200)={{0x4000000000000000, 0x0, 0xfffffffffffffffe, 0x401}, 'syz0\x00', 0x15}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x10000, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000000180)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000100)) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:29 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x300, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:29 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) 18:14:29 executing program 5: ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x2}}) socketpair(0x2000005, 0x6, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f0000000000)='./file0\x00', 0xffff) sendfile(r1, r1, &(0x7f00000001c0)=0x5, 0xa9fffffffffffffc) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000200)={r1}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000500)={0xfffffffffffff000, 0x0, 0x6, 0x1ff}, 0x8) getsockname$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@null, @remote, @default, @default, @remote, @netrom, @default, @default]}, &(0x7f0000000180)=0x48) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002bbd7000fedb070000000000000004005f00000008000600010000001c00020008000d000000000008000d000500000000000000000000000800050004000000080006002a0c0000"], 0x50}}, 0x4040880) r3 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0xf}}, 0x20) ioctl$EVIOCGBITKEY(r3, 0x80404521, &(0x7f0000000540)=""/197) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000640)={0x0, 0x5}, &(0x7f0000000680)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000006c0)={r5, @in6={{0xa, 0x4e22, 0x8, @remote, 0x309}}}, &(0x7f0000000780)=0x84) r6 = dup3(r0, r1, 0x80000) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000400), r4, r6}}, 0x18) 18:14:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:29 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:30 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:30 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4601000301040000000000000003000300ffffffff5e0300000000000040000000000000005c0100000000000001010000567d380001001f490800fcff04000060010000000600000000000000b30000000000000006000000000000000300000000000000e8c8fffffffffffff7ffffffffffffff07000000080000000700000000000000ff00000000000000050000000000000000fcffffffffffff000c00000000000005000000000000001c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a1fee83b5415c26f2b645a5c2a38e56000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000504f687300"/1457], 0x5b1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfffffff6, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:30 executing program 4: socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r0, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:30 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000002c0)='/dev/snd/timer\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x82000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}]}, 0x24}}, 0x81) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x1f, 0x80000) getsockopt$inet_dccp_buf(r2, 0x21, 0x8c, &(0x7f0000000300)=""/105, &(0x7f0000000000)=0x69) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:14:30 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) [ 2203.708565][T31510] IPVS: ftp: loaded support on port[0] = 21 [ 2203.819877][T31510] chnl_net:caif_netlink_parms(): no params data found [ 2203.866645][T31510] bridge0: port 1(bridge_slave_0) entered blocking state [ 2203.874384][T31510] bridge0: port 1(bridge_slave_0) entered disabled state [ 2203.882975][T31510] device bridge_slave_0 entered promiscuous mode [ 2203.894027][T31510] bridge0: port 2(bridge_slave_1) entered blocking state [ 2203.901538][T31510] bridge0: port 2(bridge_slave_1) entered disabled state [ 2203.909819][T31510] device bridge_slave_1 entered promiscuous mode [ 2203.933556][T31510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2203.945643][T31510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2203.974476][T31510] team0: Port device team_slave_0 added [ 2203.982067][T31510] team0: Port device team_slave_1 added [ 2204.061237][T31510] device hsr_slave_0 entered promiscuous mode [ 2204.098582][T31510] device hsr_slave_1 entered promiscuous mode [ 2204.156040][T31510] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.163192][T31510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2204.170631][T31510] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.177713][T31510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2204.245608][T31510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2204.258999][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2204.267079][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.275983][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2204.284330][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2204.298055][T31510] 8021q: adding VLAN 0 to HW filter on device team0 [ 2204.309847][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2204.318997][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2204.326065][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2204.337368][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2204.346104][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2204.353198][T14495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2204.520860][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2204.529717][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2204.538087][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2204.629734][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2204.638053][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2204.647228][T31510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2204.740059][T31510] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:33 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x3, 0x1) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 18:14:33 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfffffffe, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:33 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x8400) connect$rxrpc(r1, &(0x7f00000000c0)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x2}}, 0x24) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 18:14:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x2, 0x0, 0x4, 0x2, 0x6}, 0x0, 0x0, 0x3}) 18:14:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000080)) 18:14:33 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:33 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) socket$alg(0x26, 0x5, 0x0) 18:14:34 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={@remote, @loopback, @empty, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3}) 18:14:34 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2206.439164][ T5053] device bridge_slave_1 left promiscuous mode [ 2206.445385][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.498897][ T5053] device bridge_slave_0 left promiscuous mode [ 2206.505206][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.181908][ T5053] device hsr_slave_1 left promiscuous mode [ 2208.225253][ T5053] device hsr_slave_0 left promiscuous mode [ 2208.281931][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2208.295135][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2208.306443][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2208.342267][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2208.434372][ T5053] bond0 (unregistering): Released all slaves [ 2208.559883][T31569] IPVS: ftp: loaded support on port[0] = 21 [ 2208.625827][T31569] chnl_net:caif_netlink_parms(): no params data found [ 2208.663068][T31569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2208.670440][T31569] bridge0: port 1(bridge_slave_0) entered disabled state [ 2208.678812][T31569] device bridge_slave_0 entered promiscuous mode [ 2208.686417][T31569] bridge0: port 2(bridge_slave_1) entered blocking state [ 2208.693738][T31569] bridge0: port 2(bridge_slave_1) entered disabled state [ 2208.702154][T31569] device bridge_slave_1 entered promiscuous mode [ 2208.767429][T31569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2208.778957][T31569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2208.801391][T31569] team0: Port device team_slave_0 added [ 2208.808879][T31569] team0: Port device team_slave_1 added [ 2208.871106][T31569] device hsr_slave_0 entered promiscuous mode [ 2208.908519][T31569] device hsr_slave_1 entered promiscuous mode [ 2208.996457][T31569] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.003566][T31569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.010973][T31569] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.018057][T31569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.097313][T31569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2209.115896][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2209.136726][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.152959][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 2209.170006][T31569] 8021q: adding VLAN 0 to HW filter on device team0 [ 2209.188768][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2209.197972][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2209.205079][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2209.236660][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2209.247824][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2209.254945][T14495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2209.288281][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2209.296961][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2209.319260][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2209.327139][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2209.335924][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2209.346752][T31569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2209.372709][T31569] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:38 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x400000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000400)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000480)={0x13, 0x10, 0xfa00, {&(0x7f0000000200), r1, 0x2}}, 0x18) semget(0x1, 0x3, 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x402, 0x0, 0x1000000000000000}, 0x200}) r2 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000000100)={0x7e, ""/126}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x300, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f00000000c0)={'ifb0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x21}}}) 18:14:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x0) shmat(0x0, &(0x7f0000ffa000/0x1000)=nil, 0x0) 18:14:38 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:38 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xedc000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x82, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000180)=""/114) r2 = fcntl$getown(r0, 0x9) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0x40345410, &(0x7f0000000040)={{0x2}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x0, 0xffff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000280)={r4, 0x9}, &(0x7f00000002c0)=0x8) r5 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x170, 0x400) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000100), 0x4) fcntl$lock(r5, 0x27, &(0x7f0000000300)={0x3, 0x2, 0x8a8e, 0xcdf5, r2}) 18:14:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, 0x0) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:38 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:38 executing program 2: syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x60ea, 0x0, 0x0, 0x0, @remote}}}}}, 0x0) 18:14:38 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:38 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f00000000c0)={{0x100000000000002, 0x0, 0x0, 0x0, 0x1}, 0x80}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101040, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) pipe(&(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) 18:14:38 executing program 2: r0 = open(&(0x7f0000000180)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x0) write$tun(r0, 0x0, 0xfb24ac61ac66dc4c) mlock2(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) r1 = getpid() r2 = perf_event_open(0x0, r1, 0xfffff7ffffffffff, r0, 0x0) mlockall(0x4) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) fchdir(r2) syz_genetlink_get_family_id$team(0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) open(0x0, 0x60c941, 0x0) r4 = dup(r3) bind$inet6(r3, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f00000001c0), 0x4) r5 = open(&(0x7f0000000000)='./bus\x00', 0x100000141042, 0x0) ftruncate(r5, 0x10099b7) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) sendfile(r3, r5, 0x0, 0x8000fffffffe) 18:14:38 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) [ 2210.529111][T31632] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:14:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x100000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)={r2, 0xffff}, &(0x7f0000000280)=0x8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0xffffffffffffffe7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000002c0)={0x7fff, 0x0, 0xfffffffffffffffc, 0x5, 0x0, 0x7}) connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r3}, 0x10) 18:14:39 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000240)='/dev/snd/timer\x00', 0x0, 0x200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x0, 0x3}, 0x3dd, 0x0, 0x1}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x400, 0x0) 18:14:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)) r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x200000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:39 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:39 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0b") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:39 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0x40345410, &(0x7f0000000040)={{0x2}}) 18:14:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@initdev, @rand_addr, @initdev}, 0xc) 18:14:39 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:39 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:40 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0b") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:40 executing program 5: 18:14:40 executing program 2: 18:14:40 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2213.269677][ T5053] device bridge_slave_1 left promiscuous mode [ 2213.275886][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2213.329032][ T5053] device bridge_slave_0 left promiscuous mode [ 2213.335184][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.061263][ T5053] device hsr_slave_1 left promiscuous mode [ 2215.132561][ T5053] device hsr_slave_0 left promiscuous mode [ 2215.193986][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2215.207165][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2215.219060][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2215.252868][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2215.346384][ T5053] bond0 (unregistering): Released all slaves [ 2215.436313][T31696] IPVS: ftp: loaded support on port[0] = 21 [ 2215.517421][T31696] chnl_net:caif_netlink_parms(): no params data found [ 2215.547174][T31696] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.554410][T31696] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.562776][T31696] device bridge_slave_0 entered promiscuous mode [ 2215.571573][T31696] bridge0: port 2(bridge_slave_1) entered blocking state [ 2215.578778][T31696] bridge0: port 2(bridge_slave_1) entered disabled state [ 2215.586791][T31696] device bridge_slave_1 entered promiscuous mode [ 2215.608021][T31696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2215.619405][T31696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2215.642577][T31696] team0: Port device team_slave_0 added [ 2215.714654][T31696] team0: Port device team_slave_1 added [ 2215.771345][T31696] device hsr_slave_0 entered promiscuous mode [ 2215.808609][T31696] device hsr_slave_1 entered promiscuous mode [ 2215.865613][T31696] bridge0: port 2(bridge_slave_1) entered blocking state [ 2215.872731][T31696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2215.880141][T31696] bridge0: port 1(bridge_slave_0) entered blocking state [ 2215.887237][T31696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2215.970921][T31696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2215.987065][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2215.996037][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 2216.004869][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 2216.021147][T31696] 8021q: adding VLAN 0 to HW filter on device team0 [ 2216.035120][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2216.050508][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2216.057617][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2216.082224][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2216.091248][ T3123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2216.098364][ T3123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2216.124554][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2216.142037][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2216.162230][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2216.176947][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2216.197591][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2216.214860][T31696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2216.240442][T31696] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x300000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:44 executing program 5: 18:14:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:44 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0b") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:44 executing program 2: 18:14:44 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:14:45 executing program 5: [ 2216.658307][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2216.664156][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:14:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7b") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:45 executing program 2: 18:14:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:45 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:14:45 executing program 5: syz_init_net_socket$ax25(0x3, 0x7000000, 0x0) 18:14:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x400000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:45 executing program 2: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, 0x0, 0x0) 18:14:45 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="a4fd789c06000500010142e3fea323326c70"], 0x12) close(r2) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x2) 18:14:45 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7b") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:45 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 18:14:45 executing program 2: r0 = socket(0x10, 0x802, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@local, @in=@dev}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipddp0\x00'}) recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x4004091) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000340)={0x20}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgpoup.events\x00>\xa5^\x10\xa8)\x9ds\xeemr\xda\x86\xf4\xdb\xed/\x19\xb5*H\xa9\x0ea\x87)\x89L\x91\x8aI\x85\xeb\x8fo,1h\x1f\x98\x87 \xc1u<\x87\xf1=\x03a\xb8%\xfe/J\xc4\xad\x9e\xdb\xd5^\xeb\xfe\f\xee$\x0f\xf8\x94\xa1J\xe0\xeb\xe6\xc8A\xb4\x9b\xed\xc1D\x02\xa1R\x88\x15\xb5\xafr5\xf0\xef\xce\xe6\xb1\xcb\xa8r\x81a\xd6\x1a\x1a\xb8\xa9\x17\xc2\xb5', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000380), 0x10076) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1, 0x0, 0x8, 0x0, 0x300000000000000}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @rand_addr=0x20}}, 0x7f, 0x8, 0x101, 0x0, 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xbcda34450b800b7a, 0x40000000000a132, 0xffffffffffffffff, 0x0) 18:14:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7b") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x500000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:46 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:14:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:46 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:14:46 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000380)={0x7b}) 18:14:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:46 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:46 executing program 2: clone(0x808106, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0xa, 0x0, 0x0) 18:14:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="c0dc00025e0b01047be070") r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 18:14:46 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be0") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) [ 2220.172382][T31804] IPVS: ftp: loaded support on port[0] = 21 [ 2220.209115][ T5053] device bridge_slave_1 left promiscuous mode [ 2220.215571][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2220.258974][ T5053] device bridge_slave_0 left promiscuous mode [ 2220.265226][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2221.929986][ T5053] device hsr_slave_1 left promiscuous mode [ 2221.972592][ T5053] device hsr_slave_0 left promiscuous mode [ 2222.023923][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2222.036174][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2222.046780][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2222.104533][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2222.173974][ T5053] bond0 (unregistering): Released all slaves [ 2222.345782][T31804] chnl_net:caif_netlink_parms(): no params data found [ 2222.377793][T31804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.384988][T31804] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.393019][T31804] device bridge_slave_0 entered promiscuous mode [ 2222.401282][T31804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.408588][T31804] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.416577][T31804] device bridge_slave_1 entered promiscuous mode [ 2222.439285][T31804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2222.451876][T31804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2222.472658][T31804] team0: Port device team_slave_0 added [ 2222.479713][T31804] team0: Port device team_slave_1 added [ 2222.561358][T31804] device hsr_slave_0 entered promiscuous mode [ 2222.598589][T31804] device hsr_slave_1 entered promiscuous mode [ 2222.698112][T31804] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.705225][T31804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2222.712631][T31804] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.719702][T31804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.760405][T31804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2222.776254][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2222.785722][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.793766][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.815325][T31804] 8021q: adding VLAN 0 to HW filter on device team0 [ 2222.829705][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2222.838924][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.845995][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2222.869477][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2222.878045][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.885175][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2222.894317][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2222.904087][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2222.916422][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2222.942543][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2222.951422][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2222.962564][T31804] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2222.987716][T31804] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x600000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:51 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:14:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:51 executing program 5: syz_emit_ethernet(0x2a, &(0x7f0000000280)={@dev, @link_local, [], {@mpls_mc={0x8848, {[], @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}, @igmp={0x0, 0x0, 0x0, @local}}}}}}, 0x0) 18:14:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000003c0), 0x0) pipe2(&(0x7f0000000100), 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') fstat(0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) add_key(0x0, &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xfffffffffffffffa) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) 18:14:51 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) [ 2223.480073][T31824] bridge0: port 2(bridge_slave_1) entered disabled state [ 2223.489886][T31824] bridge0: port 1(bridge_slave_0) entered disabled state 18:14:51 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") unshare(0x20400) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, 0x0) 18:14:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:52 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:52 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2224.739344][T31830] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.746589][T31830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.754046][T31830] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.761175][T31830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2224.814259][T31830] device bridge0 entered promiscuous mode [ 2224.845783][T31849] bridge0: port 2(bridge_slave_1) entered disabled state [ 2224.853028][T31849] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.878464][T31849] device bridge0 left promiscuous mode 18:14:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x700000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:53 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2224.974903][T31835] bridge0: port 2(bridge_slave_1) entered blocking state [ 2224.982026][T31835] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2224.989424][T31835] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.996503][T31835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2225.012609][T31835] device bridge0 entered promiscuous mode 18:14:53 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) splice(r0, 0x0, r2, 0x0, 0x80000001, 0x0) 18:14:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x100000, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000180)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000080), &(0x7f0000000300)='.', 0x0, 0x5010, 0x0) 18:14:53 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x5}) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x800000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:53 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:53 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) 18:14:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x0, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102}, 0x20) 18:14:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:53 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:54 executing program 5: shmctl$IPC_SET(0x0, 0xf, &(0x7f0000000500)) 18:14:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) pipe2(&(0x7f0000000100), 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') fstat(0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 18:14:54 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2225.993624][T31899] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.001486][T31899] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.087139][T31899] device bridge0 left promiscuous mode 18:14:54 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:54 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2226.608749][T31907] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.615862][T31907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2226.623298][T31907] bridge0: port 1(bridge_slave_0) entered blocking state [ 2226.630418][T31907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2226.649068][T31907] device bridge0 entered promiscuous mode [ 2226.724282][T31918] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.731499][T31918] bridge0: port 1(bridge_slave_0) entered disabled state [ 2226.753516][T31918] device bridge0 left promiscuous mode [ 2227.634722][T31921] IPVS: ftp: loaded support on port[0] = 21 [ 2227.774505][T31921] chnl_net:caif_netlink_parms(): no params data found [ 2227.870857][T31921] bridge0: port 1(bridge_slave_0) entered blocking state [ 2227.878013][T31921] bridge0: port 1(bridge_slave_0) entered disabled state [ 2227.885993][T31921] device bridge_slave_0 entered promiscuous mode [ 2227.894608][T31921] bridge0: port 2(bridge_slave_1) entered blocking state [ 2227.901921][T31921] bridge0: port 2(bridge_slave_1) entered disabled state [ 2227.911043][T31921] device bridge_slave_1 entered promiscuous mode [ 2228.000398][T31921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2228.012536][T31921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2228.022940][ T5053] device bridge_slave_1 left promiscuous mode [ 2228.030022][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.069746][ T5053] device bridge_slave_0 left promiscuous mode [ 2228.076026][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2229.860768][ T5053] device hsr_slave_1 left promiscuous mode [ 2229.914839][ T5053] device hsr_slave_0 left promiscuous mode [ 2229.973118][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2229.984459][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2229.996658][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2230.032797][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2230.125146][ T5053] bond0 (unregistering): Released all slaves [ 2230.261740][T31921] team0: Port device team_slave_0 added [ 2230.268726][T31921] team0: Port device team_slave_1 added [ 2230.330042][T31921] device hsr_slave_0 entered promiscuous mode [ 2230.388409][T31921] device hsr_slave_1 entered promiscuous mode [ 2230.463846][T31921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2230.483041][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2230.491689][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2230.505234][T31921] 8021q: adding VLAN 0 to HW filter on device team0 [ 2230.515126][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2230.524339][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2230.533385][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.540481][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2230.554568][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2230.562630][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2230.572356][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2230.580835][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.587888][T14495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2230.595964][T14495] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2230.609133][T14655] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2230.663006][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2230.678133][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2230.694205][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2230.704591][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2230.720790][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2230.743111][T31921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2230.754764][T31921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2230.764171][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2230.785653][T31921] 8021q: adding VLAN 0 to HW filter on device batadv0 18:14:59 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x900000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:14:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:14:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:59 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:14:59 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000000c0), 0x0) pipe2(&(0x7f0000000100), 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000cf6fe4), 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000002c0)='team\x00') fstat(0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xffffffffffffffdb}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) 18:14:59 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:14:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:14:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:14:59 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:14:59 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2231.368591][ C1] protocol 88fb is buggy, dev hsr_slave_0 18:14:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2231.890761][T31945] bridge0: port 2(bridge_slave_1) entered blocking state [ 2231.897962][T31945] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2231.905435][T31945] bridge0: port 1(bridge_slave_0) entered blocking state [ 2231.912559][T31945] bridge0: port 1(bridge_slave_0) entered forwarding state 18:15:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xa00000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:00 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) [ 2231.939805][T31945] device bridge0 entered promiscuous mode [ 2231.959030][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready 18:15:00 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000380)={0x7f}, &(0x7f0000000400), 0x0) 18:15:00 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:15:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:00 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x1000000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:00 executing program 2: 18:15:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:00 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18:15:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:01 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:01 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:01 executing program 2: 18:15:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:01 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2234.480716][T32015] IPVS: ftp: loaded support on port[0] = 21 [ 2234.678559][T32015] chnl_net:caif_netlink_parms(): no params data found [ 2234.775788][T32015] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.782949][T32015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.790911][T32015] device bridge_slave_0 entered promiscuous mode [ 2234.869118][T32015] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.876177][T32015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.886580][T32015] device bridge_slave_1 entered promiscuous mode [ 2234.905771][ T5053] device bridge_slave_1 left promiscuous mode [ 2234.912228][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.959346][ T5053] device bridge_slave_0 left promiscuous mode [ 2234.965563][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2236.731402][ T5053] device hsr_slave_1 left promiscuous mode [ 2236.775384][ T5053] device hsr_slave_0 left promiscuous mode [ 2236.814982][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2236.826909][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2236.838090][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2236.914659][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2237.004411][ T5053] bond0 (unregistering): Released all slaves [ 2237.113712][T32015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2237.124769][T32015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2237.147468][T32015] team0: Port device team_slave_0 added [ 2237.155211][T32015] team0: Port device team_slave_1 added [ 2237.210477][T32015] device hsr_slave_0 entered promiscuous mode [ 2237.248571][T32015] device hsr_slave_1 entered promiscuous mode [ 2237.339335][T32015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2237.356221][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2237.367064][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2237.401645][T32015] 8021q: adding VLAN 0 to HW filter on device team0 [ 2237.413098][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2237.422506][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2237.431096][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2237.438154][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2237.456184][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2237.464803][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2237.473716][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2237.486173][T22901] bridge0: port 2(bridge_slave_1) entered blocking state [ 2237.493284][T22901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2237.507721][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2237.516550][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2237.543474][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2237.554972][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2237.573915][T32015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2237.590761][T32015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2237.605799][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2237.617041][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2237.631631][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2237.655367][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2237.670871][T32015] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:06 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2000000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:06 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:06 executing program 2: 18:15:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:06 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:06 executing program 2: 18:15:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:06 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:06 executing program 2: 18:15:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x2010000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:07 executing program 2: 18:15:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x14}, 0x0) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:07 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:07 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:07 executing program 2: 18:15:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x14}, 0x0) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3f00000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:07 executing program 2: 18:15:07 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:07 executing program 2: 18:15:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x14}, 0x0) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:07 executing program 2: 18:15:07 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:08 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:08 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:08 executing program 2: [ 2241.324033][T32100] IPVS: ftp: loaded support on port[0] = 21 [ 2241.524274][T32100] chnl_net:caif_netlink_parms(): no params data found [ 2241.622038][T32100] bridge0: port 1(bridge_slave_0) entered blocking state [ 2241.629271][T32100] bridge0: port 1(bridge_slave_0) entered disabled state [ 2241.636881][T32100] device bridge_slave_0 entered promiscuous mode [ 2241.644570][T32100] bridge0: port 2(bridge_slave_1) entered blocking state [ 2241.651754][T32100] bridge0: port 2(bridge_slave_1) entered disabled state [ 2241.659717][T32100] device bridge_slave_1 entered promiscuous mode [ 2241.744746][T32100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2241.756801][T32100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2241.849678][T32100] team0: Port device team_slave_0 added [ 2241.856570][T32100] team0: Port device team_slave_1 added [ 2241.911532][T32100] device hsr_slave_0 entered promiscuous mode [ 2241.948410][T32100] device hsr_slave_1 entered promiscuous mode [ 2241.999253][ T5053] device bridge_slave_1 left promiscuous mode [ 2242.005469][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2242.079246][ T5053] device bridge_slave_0 left promiscuous mode [ 2242.085522][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.881795][ T5053] device hsr_slave_1 left promiscuous mode [ 2243.924053][ T5053] device hsr_slave_0 left promiscuous mode [ 2244.012056][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2244.024522][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2244.038338][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2244.076536][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2244.159809][ T5053] bond0 (unregistering): Released all slaves [ 2244.353028][T32100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2244.366083][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2244.374547][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2244.384656][T32100] 8021q: adding VLAN 0 to HW filter on device team0 [ 2244.397963][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2244.407195][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2244.416425][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2244.423534][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2244.449407][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2244.457198][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2244.466109][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2244.474580][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 2244.481669][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2244.490459][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2244.499366][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2244.507884][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2244.516617][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2244.525313][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2244.533992][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2244.542601][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2244.599955][T32100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2244.610779][T32100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2244.622854][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2244.631425][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2244.640190][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2244.648834][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2244.657369][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2244.684995][T32100] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:13 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x4000000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:13 executing program 2: 18:15:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:13 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:13 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:13 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:13 executing program 2: seccomp(0x400000001, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) 18:15:13 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2245.287681][ T27] audit: type=1326 audit(1560363313.664:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32126 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0xffff0000 18:15:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x8cffffff00000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:14 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) [ 2246.101900][ T27] audit: type=1326 audit(1560363314.484:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32126 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0xffff0000 18:15:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") sigaltstack(&(0x7f0000ff1000/0x4000)=nil, 0x0) 18:15:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:14 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xf6ffffff00000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, 0x0) 18:15:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:14 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfec7be070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 18:15:15 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000280)=""/204, 0xcc, 0x0, 0x0) 18:15:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r1, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000001000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") capget(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)) 18:15:15 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:15 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2248.565626][T32204] IPVS: ftp: loaded support on port[0] = 21 [ 2248.785704][T32204] chnl_net:caif_netlink_parms(): no params data found [ 2248.897025][T32204] bridge0: port 1(bridge_slave_0) entered blocking state [ 2248.904562][T32204] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.912909][T32204] device bridge_slave_0 entered promiscuous mode [ 2249.011326][T32204] bridge0: port 2(bridge_slave_1) entered blocking state [ 2249.018796][T32204] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.026445][T32204] device bridge_slave_1 entered promiscuous mode [ 2249.119906][T32204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.131422][T32204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.231386][T32204] team0: Port device team_slave_0 added [ 2249.238877][T32204] team0: Port device team_slave_1 added [ 2249.281145][T32204] device hsr_slave_0 entered promiscuous mode [ 2249.348647][T32204] device hsr_slave_1 entered promiscuous mode [ 2249.389316][ T5053] device bridge_slave_1 left promiscuous mode [ 2249.395503][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2249.439733][ T5053] device bridge_slave_0 left promiscuous mode [ 2249.445942][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2251.050092][ T5053] device hsr_slave_1 left promiscuous mode [ 2251.131767][ T5053] device hsr_slave_0 left promiscuous mode [ 2251.173296][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2251.187195][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2251.199552][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2251.252722][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2251.354418][ T5053] bond0 (unregistering): Released all slaves [ 2251.504323][T32204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2251.517176][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2251.525291][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2251.536174][T32204] 8021q: adding VLAN 0 to HW filter on device team0 [ 2251.551509][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2251.561782][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2251.570483][T14805] bridge0: port 1(bridge_slave_0) entered blocking state [ 2251.577568][T14805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2251.585727][T14805] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2251.604335][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2251.613608][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2251.622273][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 2251.629393][ T8266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2251.649390][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2251.657958][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2251.667641][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2251.676200][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2251.685127][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2251.693885][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2251.702680][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2251.772402][T32204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2251.783026][T32204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2251.794516][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2251.802758][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2251.811687][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2251.820514][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2251.829130][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2251.861592][T32204] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:20 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xf9fdffff00000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:20 executing program 2: seccomp(0x400000001, 0x0, &(0x7f0000001980)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) flock(0xffffffffffffffff, 0x0) 18:15:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:20 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 18:15:20 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 2252.194632][ T27] audit: type=1326 audit(1560363320.574:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0xffff0000 18:15:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2252.248409][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2252.254181][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2252.260053][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2252.265821][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r0) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:20 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2252.978076][ T27] audit: type=1326 audit(1560363321.354:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32218 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c0ba code=0xffff0000 18:15:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xfeffffff00000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, 0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:21 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 18:15:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) setsockopt$sock_timeval(r0, 0xffff, 0x1006, &(0x7f0000000080)={0x10000}, 0x10) socketpair(0x1e, 0x10000002, 0x6, 0x0) recvfrom$inet(r1, 0x0, 0x5298f83365f71587, 0x0, 0x0, 0x800e00606) shutdown(r0, 0x0) 18:15:21 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000001c0)) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e003e6) 18:15:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xff00000000000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:21 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r2, r0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:22 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000100)=""/111, 0x6f, 0x0, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x0, 0x0) 18:15:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:22 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:22 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:22 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000020d000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x8]}}, 0x1c) [ 2255.854469][T32310] IPVS: ftp: loaded support on port[0] = 21 [ 2256.003648][T32310] chnl_net:caif_netlink_parms(): no params data found [ 2256.109610][T32310] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.117051][T32310] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.125065][T32310] device bridge_slave_0 entered promiscuous mode [ 2256.132773][T32310] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.140355][T32310] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.148436][T32310] device bridge_slave_1 entered promiscuous mode [ 2256.246743][T32310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2256.258427][T32310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2256.353767][T32310] team0: Port device team_slave_0 added [ 2256.361274][T32310] team0: Port device team_slave_1 added [ 2256.400243][T32310] device hsr_slave_0 entered promiscuous mode [ 2256.448710][T32310] device hsr_slave_1 entered promiscuous mode [ 2256.594115][T32310] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.601194][T32310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2256.608611][T32310] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.615647][T32310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2256.740124][T32310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2256.754982][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2256.764312][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.772223][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.781492][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2256.794050][ T5053] device bridge_slave_1 left promiscuous mode [ 2256.800885][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.870158][ T5053] device bridge_slave_0 left promiscuous mode [ 2256.876402][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2258.591109][ T5053] device hsr_slave_1 left promiscuous mode [ 2258.636291][ T5053] device hsr_slave_0 left promiscuous mode [ 2258.682736][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2258.694843][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2258.707564][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2258.773135][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2258.875959][ T5053] bond0 (unregistering): Released all slaves [ 2259.013078][T32310] 8021q: adding VLAN 0 to HW filter on device team0 [ 2259.027137][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2259.035558][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 2259.042654][ T8266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2259.058344][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2259.067522][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2259.076165][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2259.083264][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2259.091062][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2259.099818][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2259.110744][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2259.123742][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2259.132683][ T8266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2259.152103][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2259.161182][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2259.170132][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2259.179037][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2259.187220][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2259.195683][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2259.206222][T32310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2259.235156][T32310] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:27 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xffffff7f00000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) 18:15:27 executing program 4: socketpair(0x11, 0x3, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="c0dca5055e0bcfec7be070") 18:15:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:27 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2259.548272][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2259.554118][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:28 executing program 2: syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 18:15:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0xfff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) write$cgroup_pid(r0, &(0x7f0000000180), 0x12) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) 18:15:28 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:28 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) r1 = accept4(r0, 0x0, &(0x7f0000000140), 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) syz_genetlink_get_family_id$team(0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @local}}, 0x0, 0x5, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100), 0x4) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, 0x0, 0x0) accept4$alg(r1, 0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 2260.158016][ T27] audit: type=1800 audit(1560363328.534:162): pid=32344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17201 res=0 18:15:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0xffffffff00000000, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:29 executing program 4: open(&(0x7f0000002000)='./bus\x00', 0x54000, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x234000, 0x32) perf_event_open(&(0x7f0000000040)={0x800000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffd) rmdir(&(0x7f00000003c0)='./bus\x00') fcntl$getown(0xffffffffffffffff, 0x9) r0 = socket$inet6(0xa, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r0, r1, &(0x7f00000000c0)=0x202, 0x8) 18:15:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:29 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x50, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x100000237, 0x0, 0x0, 0x800e00689) shutdown(r0, 0x0) 18:15:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'%d', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xffffffffffffffff, @multicast2}, 0xf8) recvfrom$inet(r0, 0x0, 0x100000237, 0x2, 0x0, 0x800e00892) shutdown(r0, 0x0) 18:15:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:29 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp6\x00') preadv(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/66, 0x42}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x3, 0x0) 18:15:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:29 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:29 executing program 4: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x0, 0x0, 0x0, "eb347a56565fc2fa56be3221350e747e0d51df7fad49b2c5936f9e0c0157f18c"}) 18:15:30 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:30 executing program 2: pipe(0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000380)='/dev/urandom\x00', 0x10000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) write(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) fsetxattr$security_smack_entry(0xffffffffffffffff, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000300)='em0#@)bdev\x00', 0xb, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00\xa7\x83\x1aU\xcb\xeb\xb2\xb7q\xc4t_waw\xe9\xed\x96\xb4\xbc\xbejU\xc3\x01C\x94`\x04qO\x06\xc7W\xeb=^V\t*\xff\x87\xfe\xadC\xf6H\xf4\xfc\xeb\xb7P\xaa;\x92\x89\xecE:5\xabPf\x94\xa0\x1b)\x90\xf5LNx\xa0+2\xffz\x9bY\xa2\x1d\xf4\x85Un2\x95\xc7\f^\xfdY\xca\xd8:\x1c(\x87\xca\xbb\x91\xe4\x8e{U\xec\xa6\xf8d\xd6\xbb\xe5)(\xb9\x83s\x89e\xe2\xe8\xad\xf3\x9bmh*DP\x8a\xe6uF\x87\x9e\x9ck)\x8e\xc4 \x8c\xcd\xe7\x9e\x944g Yni\xd9\xebZ\xd8\x93\xcc\xc8*\xbb\xc9\xfd\x96\xbf\xd4\xbd\r\xd2\xbe]\xa1\x80\xd22\xf3\x1d\x81\xcf\xf8\xdbG\xdcu\x91\xe2=\xd8\xb0\x1e\xd4q', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3, 0x1100082) r2 = memfd_create(0x0, 0x0) pwritev(r2, &(0x7f0000000140)=[{&(0x7f0000000180)="16", 0x1}], 0x1, 0x401081806) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, "f8ca781d5f7e93115c52fa936f014904ccdb29372829d175a4e80426585243b3926d887f686449fdd786f718d8343d49d4273cc82ed2a2ef63524fc21d710476", "92ef27daf4634f9065ecbc04c983083f390c3d7bf9ac5c11d0b60f5d070e9826557914da1567ee4534b1192353f3f801223d563be035c7fb302fe546973e9c78", "f1a55947f83b5a8a1bd0d7e25a30c2c9d78038891de2ae1c3c5b7be4da2a17da"}) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x1cf) 18:15:30 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:30 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2263.273772][T32423] IPVS: ftp: loaded support on port[0] = 21 [ 2263.487973][T32423] chnl_net:caif_netlink_parms(): no params data found [ 2263.592011][T32423] bridge0: port 1(bridge_slave_0) entered blocking state [ 2263.599427][T32423] bridge0: port 1(bridge_slave_0) entered disabled state [ 2263.607384][T32423] device bridge_slave_0 entered promiscuous mode [ 2263.694510][T32423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2263.702219][T32423] bridge0: port 2(bridge_slave_1) entered disabled state [ 2263.710321][T32423] device bridge_slave_1 entered promiscuous mode [ 2263.731296][T32423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2263.814463][T32423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2263.839995][T32423] team0: Port device team_slave_0 added [ 2263.923422][T32423] team0: Port device team_slave_1 added [ 2263.963554][T32423] device hsr_slave_0 entered promiscuous mode [ 2264.019406][T32423] device hsr_slave_1 entered promiscuous mode [ 2264.149002][T32423] bridge0: port 2(bridge_slave_1) entered blocking state [ 2264.156105][T32423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2264.163487][T32423] bridge0: port 1(bridge_slave_0) entered blocking state [ 2264.170578][T32423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2264.195696][ T5053] device bridge_slave_1 left promiscuous mode [ 2264.202890][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.249353][ T5053] device bridge_slave_0 left promiscuous mode [ 2264.255679][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.951272][ T5053] device hsr_slave_1 left promiscuous mode [ 2265.994956][ T5053] device hsr_slave_0 left promiscuous mode [ 2266.051973][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2266.065556][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2266.077590][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2266.124584][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2266.204089][ T5053] bond0 (unregistering): Released all slaves [ 2266.311552][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2266.321675][T14653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2266.342192][T32423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2266.353334][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2266.361414][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2266.372467][T32423] 8021q: adding VLAN 0 to HW filter on device team0 [ 2266.382534][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2266.391783][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2266.400951][T14653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2266.408014][T14653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2266.429158][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2266.437745][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2266.446912][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2266.454021][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2266.461835][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2266.470443][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2266.479460][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2266.487962][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2266.499030][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2266.507062][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2266.515917][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2266.527724][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2266.539472][T22901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2266.606379][T32423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2266.624759][T32423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2266.633918][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2266.649987][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2266.678109][T32423] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:35 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'.d', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:35 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000000008000000000000000000001c3adde686"], 0x1a) lseek(0xffffffffffffffff, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) 18:15:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f0000000140)={0x2, 0xffffffffffffffff}, 0xe) recvfrom$inet(r0, 0x0, 0x100000237, 0x2, 0x0, 0x800e00892) shutdown(r0, 0x0) 18:15:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:35 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x200, 0x0, 0x0, 0x0, 0xcf}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/mcfilter\x00') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 18:15:35 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:35 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[]}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:35 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) [ 2267.824348][T32444] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 2267.884051][T32444] FAT-fs (loop4): Filesystem has been set read-only [ 2267.916239][T32444] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 17) 18:15:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'/d', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[]}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:36 executing program 0: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:36 executing program 4: 18:15:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:36 executing program 2: 18:15:36 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[]}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:36 executing program 4: 18:15:36 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'\\d', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:36 executing program 2: 18:15:36 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:36 executing program 4: 18:15:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:37 executing program 4: 18:15:37 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:37 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") clone(0x70024100, 0x0, 0x0, 0x0, 0x0) 18:15:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:37 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0xffb) fallocate(r1, 0x10, 0x0, 0x800) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) 18:15:37 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') read$eventfd(r0, 0x0, 0x0) [ 2270.769677][T32523] IPVS: ftp: loaded support on port[0] = 21 [ 2270.973008][T32523] chnl_net:caif_netlink_parms(): no params data found [ 2271.066829][T32523] bridge0: port 1(bridge_slave_0) entered blocking state [ 2271.074009][T32523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2271.082054][T32523] device bridge_slave_0 entered promiscuous mode [ 2271.155402][T32523] bridge0: port 2(bridge_slave_1) entered blocking state [ 2271.162788][T32523] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.170572][T32523] device bridge_slave_1 entered promiscuous mode [ 2271.268239][T32523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2271.280268][T32523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2271.290630][ T5053] device bridge_slave_1 left promiscuous mode [ 2271.296979][ T5053] bridge0: port 2(bridge_slave_1) entered disabled state [ 2271.338980][ T5053] device bridge_slave_0 left promiscuous mode [ 2271.345100][ T5053] bridge0: port 1(bridge_slave_0) entered disabled state [ 2273.101491][ T5053] device hsr_slave_1 left promiscuous mode [ 2273.183465][ T5053] device hsr_slave_0 left promiscuous mode [ 2273.224596][ T5053] team0 (unregistering): Port device team_slave_1 removed [ 2273.236448][ T5053] team0 (unregistering): Port device team_slave_0 removed [ 2273.248429][ T5053] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2273.304573][ T5053] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2273.416988][ T5053] bond0 (unregistering): Released all slaves [ 2273.564027][T32523] team0: Port device team_slave_0 added [ 2273.571531][T32523] team0: Port device team_slave_1 added [ 2273.610234][T32523] device hsr_slave_0 entered promiscuous mode [ 2273.658579][T32523] device hsr_slave_1 entered promiscuous mode [ 2273.746304][T32523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2273.759763][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2273.767480][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2273.780206][T32523] 8021q: adding VLAN 0 to HW filter on device team0 [ 2273.792045][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2273.801507][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2273.810053][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2273.817107][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2273.825231][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2273.835243][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2273.844379][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2273.853614][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 2273.860760][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2273.930078][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2273.953438][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2273.963098][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2273.978081][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2273.987418][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2274.010331][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2274.018606][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2274.026898][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2274.036674][T32523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2274.066420][T32523] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:42 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'f\\', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0x6, 0x12, 0x8}) 18:15:42 executing program 2: 18:15:42 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:42 executing program 2: [ 2274.461306][T32543] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 4095 (only 16 groups) 18:15:42 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000"], 0x10}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3c}, {0x80000006}]}, 0x10) 18:15:43 executing program 4: 18:15:43 executing program 2: 18:15:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000"], 0x10}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x3a, {'rootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2}, {0x80000006}]}, 0x10) 18:15:43 executing program 4: 18:15:43 executing program 2: 18:15:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000"], 0x10}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:43 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18:15:43 executing program 2: 18:15:43 executing program 4: 18:15:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x3}, {0x80000006}]}, 0x10) 18:15:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:44 executing program 2: 18:15:44 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'\\ootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:44 executing program 4: 18:15:44 executing program 2: 18:15:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x4}, {0x80000006}]}, 0x10) 18:15:44 executing program 4: 18:15:44 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:44 executing program 2: 18:15:44 executing program 4: 18:15:44 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32], 0x14}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:44 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5}, {0x80000006}]}, 0x10) 18:15:44 executing program 2: [ 2277.940096][T32616] IPVS: ftp: loaded support on port[0] = 21 [ 2278.096927][T32616] chnl_net:caif_netlink_parms(): no params data found [ 2278.194927][T32616] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.202153][T32616] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.209832][T32616] device bridge_slave_0 entered promiscuous mode [ 2278.217641][T32616] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.224829][T32616] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.232943][T32616] device bridge_slave_1 entered promiscuous mode [ 2278.330071][T32616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2278.341354][T32616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2278.361421][T32616] team0: Port device team_slave_0 added [ 2278.442575][T32616] team0: Port device team_slave_1 added [ 2278.510155][T32616] device hsr_slave_0 entered promiscuous mode [ 2278.548667][T32616] device hsr_slave_1 entered promiscuous mode [ 2278.683090][T32616] bridge0: port 2(bridge_slave_1) entered blocking state [ 2278.690178][T32616] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2278.697438][T32616] bridge0: port 1(bridge_slave_0) entered blocking state [ 2278.704538][T32616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2278.829618][T32616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2278.844149][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2278.853926][T14653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2278.862412][T14653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.871009][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 2278.883778][T18857] device bridge_slave_1 left promiscuous mode [ 2278.890350][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 2278.939586][T18857] device bridge_slave_0 left promiscuous mode [ 2278.945831][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 2280.730212][T18857] device hsr_slave_1 left promiscuous mode [ 2280.771707][T18857] device hsr_slave_0 left promiscuous mode [ 2280.812079][T18857] team0 (unregistering): Port device team_slave_1 removed [ 2280.825718][T18857] team0 (unregistering): Port device team_slave_0 removed [ 2280.836940][T18857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2280.883422][T18857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2280.976090][T18857] bond0 (unregistering): Released all slaves [ 2281.095354][T32616] 8021q: adding VLAN 0 to HW filter on device team0 [ 2281.108010][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2281.116814][ T9715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2281.125209][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 2281.132303][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2281.149028][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2281.157662][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2281.166204][T14653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2281.173323][T14653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2281.181591][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2281.190542][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2281.217867][T32616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2281.229283][T32616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2281.243549][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2281.253031][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2281.261697][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2281.270582][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2281.279133][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2281.287611][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2281.296499][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2281.304884][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2281.313422][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2281.321508][T14653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2281.386342][T32616] 8021q: adding VLAN 0 to HW filter on device batadv0 18:15:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'r%otmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:50 executing program 4: 18:15:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:50 executing program 2: 18:15:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x6}, {0x80000006}]}, 0x10) 18:15:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:50 executing program 2: 18:15:50 executing program 4: 18:15:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7}, {0x80000006}]}, 0x10) 18:15:50 executing program 2: 18:15:50 executing program 4: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) lstat(0x0, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000600)) futex(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x336, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) clock_adjtime(0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = dup2(r3, r3) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) getpriority(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400000000008000) read(r2, &(0x7f0000000640)=""/4096, 0x1000) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000140)) open(0x0, 0x0, 0x0) setsockopt(r4, 0x1, 0x9, &(0x7f0000000200)="2e9bb20e4c", 0x5) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000300)=0x80000001fe, 0x4) ftruncate(r5, 0x80006) ioctl$KDGKBENT(r0, 0x4b46, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x0) sendfile(r3, r5, &(0x7f00000000c0), 0x8000fffffffe) dup3(r2, r4, 0x0) [ 2282.148158][T32654] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 18:15:50 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'r\\otmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:50 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xc}, {0x80000006}]}, 0x10) 18:15:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:50 executing program 2: mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x3e) recvfrom$unix(r2, 0x0, 0xfffffffffffffe45, 0x0, 0x0, 0x0) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) tkill(r0, 0x16) 18:15:50 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dc86055e0bceec7be070") r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:15:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xf}, {0x80000006}]}, 0x10) 18:15:51 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rdotmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2282.868638][ T27] audit: type=1800 audit(1560363351.254:163): pid=32674 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=16516 res=0 18:15:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x14}, {0x80000006}]}, 0x10) 18:15:51 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="de75e1fe7d087634b214a3765ba0017995103a08917fc2a1", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="7b3d7e7de481", 0x6}], 0x1}], 0x1, 0x0) [ 2283.048277][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2283.054173][ C0] protocol 88fb is buggy, dev hsr_slave_1 18:15:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x4}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) 18:15:51 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x15}, {0x80000006}]}, 0x10) 18:15:51 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) 18:15:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r0) sendmsg$netlink(r3, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000", @ANYRES32=r0], 0xc}, 0x0) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x62, 0x0) [ 2285.100167][T32709] IPVS: ftp: loaded support on port[0] = 21 [ 2285.325028][T32709] chnl_net:caif_netlink_parms(): no params data found [ 2285.439911][T32709] bridge0: port 1(bridge_slave_0) entered blocking state [ 2285.447071][T32709] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.456169][T32709] device bridge_slave_0 entered promiscuous mode [ 2285.464356][T32709] bridge0: port 2(bridge_slave_1) entered blocking state [ 2285.471550][T32709] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.479583][T32709] device bridge_slave_1 entered promiscuous mode 18:15:53 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'\\ootmode', 0x3d, 0x4004}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) umount2(0x0, 0x9) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') syz_genetlink_get_family_id$tipc2(0x0) creat(&(0x7f0000000240)='./bus\x00', 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x7) set_tid_address(&(0x7f0000000080)) 18:15:53 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x16}, {0x80000006}]}, 0x10) 18:15:53 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000001680)={&(0x7f0000000240)={0x2, 0x4e24}, 0x10, 0x0, 0x0, &(0x7f0000001540)=[@ip_retopts={{0x14, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x8, [{0x0, 0x2}]}]}}}], 0x14}, 0x80) 18:15:53 executing program 0: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f00000000c0)="11dc86055e0bceec7be070") r1 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)="2da85b07f7a224ab77ab8a705cc14edf9dc89f455d2e0e8bfe37702b7d0b240e5b7ded616cbe658b8550de8b2817f3da5e030f100e2e9883893c6e62c4387267cd8d9969b213ea72d92284c6c8b4216081bf206420575278f5977f94b725862c012d", 0x62}], 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@mcast1}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0x48f) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0xfffffffffffffffd}) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 2285.585355][T32709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2285.651750][T32709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2285.705131][T18857] device bridge_slave_1 left promiscuous mode [ 2285.715238][T18857] bridge0: port 2(bridge_slave_1) entered disabled state [ 2285.809272][T18857] device bridge_slave_0 left promiscuous mode [ 2285.815458][T18857] bridge0: port 1(bridge_slave_0) entered disabled state [ 2287.880765][T18857] device hsr_slave_1 left promiscuous mode [ 2287.943558][T18857] device hsr_slave_0 left promiscuous mode [ 2287.984816][T18857] team0 (unregistering): Port device team_slave_1 removed [ 2287.996966][T18857] team0 (unregistering): Port device team_slave_0 removed [ 2288.011438][T18857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2288.035163][T18857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2288.105485][T18857] bond0 (unregistering): Released all slaves [ 2288.390739][T32709] team0: Port device team_slave_0 added [ 2288.397835][T32709] team0: Port device team_slave_1 added [ 2288.460620][T32709] device hsr_slave_0 entered promiscuous mode [ 2288.498465][T32709] device hsr_slave_1 entered promiscuous mode [ 2288.609373][T18857] ------------[ cut here ]------------ [ 2288.614870][T18857] ODEBUG: free active (active state 0) object type: timer_list hint: delayed_work_timer_fn+0x0/0x90 [ 2288.625960][T18857] WARNING: CPU: 0 PID: 18857 at lib/debugobjects.c:325 debug_print_object+0x168/0x250 [ 2288.631408][T32709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2288.635500][T18857] Kernel panic - not syncing: panic_on_warn set ... [ 2288.648646][T18857] CPU: 0 PID: 18857 Comm: kworker/u4:0 Not tainted 5.2.0-rc4-next-20190612 #13 [ 2288.657571][T18857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.667639][T18857] Workqueue: netns cleanup_net [ 2288.672402][T18857] Call Trace: [ 2288.675688][T18857] dump_stack+0x172/0x1f0 [ 2288.680014][T18857] ? debug_print_object+0x160/0x250 [ 2288.685203][T18857] panic+0x2cb/0x744 [ 2288.689090][T18857] ? __warn_printk+0xf3/0xf3 [ 2288.693674][T18857] ? debug_print_object+0x168/0x250 [ 2288.698866][T18857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2288.705128][T18857] ? __warn.cold+0x5/0x4d [ 2288.709462][T18857] ? __warn+0xe8/0x1d0 [ 2288.713520][T18857] ? debug_print_object+0x168/0x250 [ 2288.718706][T18857] __warn.cold+0x20/0x4d [ 2288.722950][T18857] ? debug_print_object+0x168/0x250 [ 2288.728130][T18857] report_bug+0x263/0x2b0 [ 2288.732467][T18857] do_error_trap+0x11b/0x200 [ 2288.737063][T18857] do_invalid_op+0x37/0x50 [ 2288.741477][T18857] ? debug_print_object+0x168/0x250 [ 2288.746670][T18857] invalid_op+0x14/0x20 [ 2288.750813][T18857] RIP: 0010:debug_print_object+0x168/0x250 [ 2288.756610][T18857] Code: dd 60 e9 c4 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 60 e9 c4 87 48 c7 c7 00 df c4 87 e8 d6 b2 0c fe <0f> 0b 83 05 3b b5 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 2288.776198][T18857] RSP: 0018:ffff888095e77838 EFLAGS: 00010086 [ 2288.782262][T18857] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 2288.790227][T18857] RDX: 0000000000000000 RSI: ffffffff815b0f56 RDI: ffffed1012bceef9 [ 2288.798197][T18857] RBP: ffff888095e77878 R08: ffff88805b074440 R09: ffffed1015d040f1 [ 2288.806164][T18857] R10: ffffed1015d040f0 R11: ffff8880ae820787 R12: 0000000000000001 [ 2288.814128][T18857] R13: ffffffff88dad8a0 R14: ffffffff816080a0 R15: ffff88806031a268 [ 2288.822097][T18857] ? calc_wheel_index+0x220/0x220 [ 2288.827136][T18857] ? vprintk_func+0x86/0x189 [ 2288.831705][T18857] ? debug_print_object+0x168/0x250 [ 2288.836883][T18857] debug_check_no_obj_freed+0x2c8/0x444 [ 2288.842411][T18857] kfree+0xf4/0x2a0 [ 2288.846215][T18857] kvfree+0x61/0x70 [ 2288.850047][T18857] netdev_freemem+0x4c/0x60 [ 2288.854560][T18857] netdev_release+0x86/0xb0 [ 2288.859083][T18857] ? xps_cpus_store+0x2b0/0x2b0 [ 2288.863929][T18857] device_release+0x7a/0x210 [ 2288.868510][T18857] kobject_put.cold+0x289/0x2e6 [ 2288.873359][T18857] netdev_run_todo+0x53b/0x7c0 [ 2288.878129][T18857] ? register_netdev+0x50/0x50 [ 2288.882898][T18857] ? unregister_netdevice_queue+0x1d2/0x2c0 [ 2288.888790][T18857] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2288.895021][T18857] ? net_set_todo+0xbf/0x150 [ 2288.899604][T18857] rtnl_unlock+0xe/0x10 [ 2288.903756][T18857] default_device_exit_batch+0x358/0x410 [ 2288.909445][T18857] ? unregister_netdevice_many+0x50/0x50 [ 2288.915075][T18857] ? default_device_exit+0x203/0x290 [ 2288.920348][T18857] ? do_wait_intr_irq+0x2b0/0x2b0 [ 2288.925366][T18857] ? rtnl_unlock+0xe/0x10 [ 2288.929687][T18857] ? unregister_netdevice_many+0x50/0x50 [ 2288.935347][T18857] ? dev_change_net_namespace+0xc70/0xc70 [ 2288.941090][T18857] ops_exit_list.isra.0+0xfc/0x150 [ 2288.946211][T18857] cleanup_net+0x3fb/0x960 [ 2288.950649][T18857] ? netns_install+0x1d0/0x1d0 [ 2288.955410][T18857] process_one_work+0x989/0x1790 [ 2288.960362][T18857] ? pwq_dec_nr_in_flight+0x320/0x320 [ 2288.965785][T18857] ? lock_acquire+0x16f/0x3f0 [ 2288.970474][T18857] worker_thread+0x98/0xe40 [ 2288.974981][T18857] ? trace_hardirqs_on+0x67/0x220 [ 2288.980020][T18857] kthread+0x354/0x420 [ 2288.984075][T18857] ? process_one_work+0x1790/0x1790 [ 2288.989275][T18857] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 2288.995503][T18857] ret_from_fork+0x24/0x30 [ 2289.001047][T18857] Kernel Offset: disabled [ 2289.005482][T18857] Rebooting in 86400 seconds..